Certified in Risk and Information Systems Control (CRISC) — Question 1423

When is the BEST time to identify risk associated with major projects to determine a mitigation plan?

Answer options

• A. Project execution phase
• B. Project closing phase
• C. Project planning phase
• D. Project initiation phase

Correct answer: C

Explanation

The best time to identify risks is during the Project planning phase, as this allows for early detection and the development of a comprehensive mitigation plan. Identifying risks during the execution or closing phases is too late to effectively implement strategies, and while risks can be considered during initiation, detailed planning is essential for thorough risk assessment.