Certified in Risk and Information Systems Control (CRISC) — Question 1097

What is the MAIN benefit of using a top-down approach to develop risk scenarios?

Answer options

• A. It describes risk events specific to technology used by the enterprise.
• B. It establishes the relationship between risk events and organizational objectives.
• C. It helps management and the risk practitioner to refine risk scenarios.
• D. It uses hypothetical and generic risk events specific to the enterprise.

Correct answer: B

Explanation

The correct answer, B, highlights how a top-down approach aligns risk events with organizational objectives, ensuring that risk management efforts are focused on strategic goals. Option A is incorrect as it emphasizes technology-specific risks rather than organizational goals. Options C and D, while relevant, do not capture the fundamental benefit of aligning risks with objectives.