Certified in Risk and Information Systems Control (CRISC) — Question 1407

Which of the following is MOST helpful in developing key risk indicator thresholds?

Answer options

• A. Loss expectancy information
• B. IT service level agreements
• C. Control performance results
• D. Remediation activity progress

Correct answer: A

Explanation

Loss expectancy information provides a quantifiable measure of potential losses associated with risks, making it critical for setting thresholds for key risk indicators. The other options, while relevant to risk management, do not directly inform threshold levels as effectively as loss expectancy data.