Certified in Risk and Information Systems Control (CRISC) — Question 1190

Which of the following is MOST helpful in identifying appropriate business stakeholders to construct and assess IT risk scenarios?

Answer options

• A. Reviewing the organization's business RACI charts
• B. Mapping each risk event to related business processes
• C. Consulting senior management for likely business candidates
• D. Conducting risk and business impact analyses

Correct answer: B

Explanation

Option B is correct because mapping each risk event to related business processes directly identifies the stakeholders involved in those processes, making it easier to assess IT risks. The other options, while useful, do not specifically focus on linking risk events to business stakeholders, which is essential for accurate scenario development.