Certified in Risk and Information Systems Control (CRISC) — Question 1322

What are the PRIMARY requirements for developing risk scenarios?
Each correct answer represents a part of the solution. (Choose two.)

Answer options

• A. Potential threats and vulnerabilities that could lead to loss events
• B. Determination of the value of an asset at risk
• C. Determination of actors that has potential to generate risk
• D. Determination of threat type

Correct answer: A, B

Explanation

The correct answers, A and B, focus on identifying potential threats and the value of assets, which are crucial for risk scenario development. Options C and D, while relevant, do not directly address the primary components needed to create effective risk scenarios.