Certified in Risk and Information Systems Control (CRISC) — Question 1248

Which of the following should be of GREATEST concern to a risk practitioner reviewing the implementation of an emerging technology?

Answer options

• A. Lack of management approval
• B. Lack of risk and control procedures
• C. Lack of risk assessment
• D. Lack of alignment to best practices

Correct answer: B

Explanation

The lack of risk and control procedures (option B) is the most critical issue because it directly affects the organization's ability to manage potential risks associated with the new technology. Without these procedures, there is an increased likelihood of adverse outcomes. While the other options are important, they do not directly address the framework required to manage risks effectively.