Certified in Risk and Information Systems Control (CRISC) — Question 1200

Which of the following information in a risk monitoring report will provide the MOST insight to stakeholders regarding risk status?

Answer options

• A. Heat map
• B. Mitigation plans
• C. Risk ownership
• D. Independent verification

Correct answer: A

Explanation

The heat map visually represents the risk levels and their potential impact, providing stakeholders with a clear and immediate understanding of the current risk environment. In contrast, mitigation plans, risk ownership, and independent verification offer useful details but do not present the overall risk status as effectively as a heat map does.