Certified in Risk and Information Systems Control (CRISC) — Question 1144

Which of the following is the BEST approach to resolve a disagreement between stakeholders regarding the impact of a potential risk scenario?

Answer options

• A. Calculate the historical impact of risk occurring at industry peers.
• B. Use the highest value of potential impact suggested by the stakeholders.
• C. Identify data that could be used to help quantify the risk.
• D. Modify the risk scenario to address stakeholder concerns.

Correct answer: C

Explanation

The correct answer, C, emphasizes the importance of using data to accurately quantify risk, providing a clearer understanding for all stakeholders. Option A, while useful, focuses on historical data rather than current stakeholder perspectives. Option B relies on subjective opinions without grounding in data, and option D may not effectively address the root of the disagreement.