Certified in Risk and Information Systems Control (CRISC) — Question 1189

The results of a risk assessment reveal risk scenarios with high impact and low likelihood of occurrence. Which of the following would be the BEST action to address these scenarios?

Answer options

• A. Create a disaster recovery plan (DRP).
• B. Assemble an incident response team.
• C. Develop a risk response plan.
• D. Initiate a business impact analysis (BIA).

Correct answer: C

Explanation

The correct choice is C, as developing a risk response plan allows for strategic planning to address the identified risks effectively. Options A and D, while important, do not specifically target the risk scenarios with low likelihood and high impact. Option B focuses on incident management rather than proactive risk response.