Certified in Risk and Information Systems Control (CRISC) — Question 1435

Which of the following is the GREATEST benefit of a risk-aware culture?

Answer options

• A. Cost of controls is reduced over time.
• B. The organization is more resilient to threats.
• C. The number of audit findings is reduced over time.
• D. Relevant risk is reported in a timely manner.

Correct answer: D

Explanation

The primary benefit of a risk-aware culture is that it ensures relevant risks are reported promptly, allowing for quicker responses and mitigations. While reducing control costs, audit findings, and increasing resilience are beneficial, they are secondary outcomes that stem from having an effective risk management process in place.