Certified in Risk and Information Systems Control (CRISC) — Question 146

Which of the following is the GREATEST benefit of incorporating IT risk scenarios into the corporate risk register?

Answer options

• A. Corporate incident escalation protocols are established
• B. The organization-wide control budget is expanded
• C. Exposure is integrated into the organization's risk profile
• D. Risk appetite cascades to business unit management

Correct answer: C

Explanation

The correct answer, C, highlights that integrating IT risk scenarios allows the organization to better understand and incorporate these risks into its overall risk profile, enhancing risk management. The other options, while beneficial, do not provide the same level of comprehensive integration into the organization's core risk management framework.