Certified in Risk and Information Systems Control (CRISC) — Question 1351

Which of the following is the MOST effective inhibitor of relevant and efficient communication?

Answer options

• A. A false sense of confidence at the top on the degree of actual exposure related to IT and lack of a well-understood direction for risk management from the top down
• B. The perception that the enterprise is trying to cover up known risk from stakeholders
• C. Existence of a blame culture
• D. Misalignment between real risk appetite and translation into policies

Correct answer: C

Explanation

The correct answer, C, highlights how a blame culture discourages open communication and can hinder transparency regarding risks. Options A and B relate to misunderstandings and perceptions, while D focuses on policy misalignment, all of which can be problematic but do not directly stifle communication like a blame culture does.