Certified in Risk and Information Systems Control (CRISC) — Question 1242

When a risk practitioner is developing a set of risk scenarios, the scenarios MUST include information about:

Answer options

• A. control efficiency
• B. threat impact analysis results
• C. the relevant threat agents
• D. the severity of occurrences

Correct answer: D

Explanation

The correct answer, D, emphasizes the importance of understanding the severity of occurrences in risk scenarios, as it directly impacts decision-making and prioritization. Options A, B, and C, while relevant, do not address the critical need to assess the actual impact of risks on the organization.