Certified in Risk and Information Systems Control (CRISC) — Question 137

Which of the following activities would BEST facilitate effective risk management throughout the organization?

Answer options

• A. Performing a business impact analysis
• B. Performing frequent audits
• C. Reviewing risk-related process documentation
• D. Conducting periodic risk assessments

Correct answer: D

Explanation

Conducting periodic risk assessments is essential for identifying and evaluating risks, making it the best choice for effective risk management. While performing business impact analyses, frequent audits, and reviewing documentation are important, they do not provide the ongoing evaluation and adjustment of risk strategies that regular assessments do.