Certified in Risk and Information Systems Control (CRISC) — Question 1074

Which of the following processes is described in the statement below?
"It is the process of exchanging information and views about risks among stakeholders, such as groups, individuals, and institutions."

Answer options

• A. Risk governance
• B. Risk identification
• C. Risk response planning
• D. Risk communication

Correct answer: D

Explanation

The correct answer is D, Risk communication, as it specifically focuses on the exchange of information regarding risks among stakeholders. Options A, B, and C do not capture this interactive aspect; Risk governance pertains to the oversight of risk management practices, Risk identification involves recognizing potential risks, and Risk response planning is about developing strategies to manage identified risks.