Certified in Risk and Information Systems Control (CRISC) — Question 1343

Which of the following is the MOST effective inhibitor of relevant and efficient communication?

Answer options

• A. A false sense of confidence at the top on the degree of actual exposure related to IT and lack of a well-understood direction for risk management from the top down
• B. The perception that the enterprise is trying to cover up known risk from stakeholders
• C. Existence of a blame culture
• D. Misalignment between real risk appetite and translation into policies

Correct answer: C

Explanation

The correct answer is C, as a blame culture discourages open communication and transparency, leading to misunderstandings and reluctance to share information. Options A and B highlight issues related to perception and direction but do not directly impede communication as severely as a blame culture. Option D addresses policy misalignment, which can complicate communication but is not as fundamentally damaging as a blame culture.