Certified in Risk and Information Systems Control (CRISC) — Question 1130

Which of the following would BEST enable a risk-based decision when considering the use of an emerging technology for data processing?

Answer options

• A. Gap analysis
• B. Resource skills matrix
• C. Threat assessment
• D. Data quality assurance (QA) plan

Correct answer: C

Explanation

The correct answer is C, as a Threat assessment evaluates potential risks and vulnerabilities associated with new technologies, helping in informed decision-making. Options A, B, and D do not focus specifically on risk evaluation, making them less effective for this purpose.