Certified in Risk and Information Systems Control (CRISC) — Question 1195

Which of the following is MOST important to ensure before using risk reports in decision making?

Answer options

• A. Real-time risk information is provided.
• B. Risk analysis results are validated.
• C. Root cause analysis is included.
• D. Quantitative risk data is provided.

Correct answer: B

Explanation

Validating risk analysis results is essential to ensure the accuracy and reliability of the information presented in the reports. Without this validation, the other options, while potentially useful, do not guarantee that the information used for decision making is trustworthy. Therefore, relying on validated analysis is critical for sound decision making.