Certified in Risk and Information Systems Control (CRISC) — Question 1337

Which of the following would be the BEST input when evaluating the risk associated with a proposed adoption of robotic process automation (RPA) of a business service?

Answer options

• A. Control objectives
• B. Cost-benefit analysis results
• C. Code review results
• D. Business continuity plan (BCP)

Correct answer: B

Explanation

The cost-benefit analysis results provide critical insights into the financial implications and potential returns of implementing RPA, making it the most relevant input for evaluating risk. In contrast, control objectives, code review results, and business continuity plans, while important in their own right, do not directly address the financial viability and risk assessment of adopting RPA.