Certified in Risk and Information Systems Control (CRISC) — Question 1319

Which of the following provides the MOST useful information to trace the impact of aggregated risk across an organization's technical environment?

Answer options

• A. Business case documentation
• B. Organizational risk appetite statement
• C. Enterprise architecture (EA) documentation
• D. Organizational hierarchy

Correct answer: C

Explanation

The correct answer is C, as Enterprise architecture (EA) documentation provides a comprehensive view of the organization's technical environment, enabling better assessment of how aggregated risks affect various components. The other options, while useful for specific aspects, do not provide the same level of technical insight needed to trace the overall impact of risk across the organization.