Certified in Risk and Information Systems Control (CRISC) — Question 1325

Which of the following events is MOST likely to trigger the need to conduct a risk assessment?

Answer options

• A. Introduction of a new product line
• B. An incident resulting in data loss
• C. Changes in executive management
• D. Updates to the information security policy

Correct answer: A

Explanation

The introduction of a new product line is a significant change that can introduce new risks, making it the most likely event to trigger a risk assessment. While data loss incidents, changes in management, and updates to security policies may also necessitate assessments, they do not inherently bring about new risks in the same way that a new product line does.