Certified in Risk and Information Systems Control (CRISC) — Question 1203

A risk practitioner observes that the network team responsible for maintaining the network infrastructure is severely understaffed, which could lead to operational losses. Which of the following is MOST directly affected by the risk practitioner's observation?

Answer options

• A. Inherent risk
• B. Impact rating
• C. Likelihood rating
• D. Control risk

Correct answer: C

Explanation

The correct answer is C, as the likelihood rating evaluates how probable an event is to occur, and an understaffed network team increases the likelihood of operational issues. The other options, such as inherent risk and impact rating, are related but do not directly correlate with the assessment of how likely an operational loss is to happen.