Certified in Risk and Information Systems Control (CRISC) — Question 1256

Which of the following is MOST important to identify when developing top-down risk scenarios?

Answer options

• A. Hypothetical scenarios
• B. Key procedure control gaps
• C. Senior management's risk appetite
• D. Business objectives

Correct answer: D

Explanation

Identifying business objectives is essential as it provides a framework for aligning risk scenarios with the organization's goals. The other options, while important, do not directly connect to the strategic direction of the business, making them less critical in the context of developing top-down risk scenarios.