Certified in Risk and Information Systems Control (CRISC) — Question 1089

Which of the following is MOST helpful in reducing the likelihood of inaccurate risk assessment results?

Answer options

• A. Having internal audit validate control effectiveness
• B. Updating organizational risk tolerance levels
• C. Reviewing the applicable risk assessment methodologies
• D. Involving relevant stakeholders in the risk assessment process

Correct answer: D

Explanation

Involving relevant stakeholders in the risk assessment process ensures that diverse perspectives and insights are considered, which leads to a more comprehensive evaluation of risks. The other options, while beneficial, do not directly address the collaborative aspect that is crucial for accurate risk assessment results.