Certified in Risk and Information Systems Control (CRISC) — Question 1028

Which of the following BEST enables a risk practitioner to determine the appropriate risk treatment for a materialized event?

Answer options

• A. Incident trend analysis
• B. Likelihood analysis
• C. Root cause analysis
• D. Impact analysis

Correct answer: D

Explanation

Impact analysis is crucial as it evaluates the consequences of a materialized event, helping to determine the necessary response and treatment. The other options, while useful in their contexts, do not directly address the assessment of outcomes to inform risk treatment decisions.