Certified in Risk and Information Systems Control (CRISC) — Question 1341

Which of the following matrices is used to specify risk thresholds?

Answer options

• A. Risk indicator matrix
• B. Impact matrix
• C. Risk scenario matrix
• D. Probability matrix

Correct answer: A

Explanation

The Risk indicator matrix is specifically designed to set and communicate risk thresholds, helping organizations manage their risk effectively. The other options, while related to risk assessment, do not directly specify risk thresholds like the Risk indicator matrix does.