Certified in Risk and Information Systems Control (CRISC) — Question 1078

What are the functions of the auditor while analyzing risk?
Each correct answer represents a complete solution. (Choose three.)

Answer options

• A. Aids in determining audit objectives
• B. Identify threats and vulnerabilities to the information system
• C. Provide information for evaluation of controls in audit planning
• D. Supporting decision based on risks

Correct answer: A, B, C

Explanation

The correct answers, A, B, and C, are essential functions of an auditor in risk analysis. A helps set the direction for the audit, B focuses on identifying potential issues, and C ensures that controls are appropriately assessed. Option D, while related to decision-making, is not a primary function of the auditor in the context of risk analysis.