Certified in Risk and Information Systems Control (CRISC) — Question 1332

While developing obscure risk scenarios, what are the requirements of the enterprise?
Each correct answer represents a part of the solution. (Choose two.)

Answer options

• A. Have capability to cure the risk events
• B. Have capability to recognize an observed event as something wrong
• C. Have sufficient number of analyst
• D. Be in a position that it can observe anything going wrong

Correct answer: B, D

Explanation

Correct answers B and D are essential because recognizing an observed event as wrong and being able to observe issues are crucial for identifying and managing risks. Options A and C, while potentially helpful, do not address the fundamental requirements for developing risk scenarios.