Certified in Risk and Information Systems Control (CRISC) — Question 1359

A risk practitioner is developing risk scenarios for a manufacturing organization that uses highly specialized systems to control its production process. Which of the following will BEST support management decision making that adequately addresses impacts to these systems?

Answer options

• A. Bottom-up approach
• B. Event tree analysis
• C. Top-down approach
• D. Control gap analysis

Correct answer: B

Explanation

Event tree analysis is effective in assessing potential outcomes and impacts of different events on complex systems, making it the best choice for management decision making. The bottom-up and top-down approaches focus more on organization-wide perspectives rather than specific system impacts, while control gap analysis identifies deficiencies rather than analyzing risk scenarios.