Certified in Risk and Information Systems Control (CRISC) — Question 163

Which of the following is a PRIMARY benefit of engaging the risk owner during the risk assessment process?

Answer options

• A. Accurate measurement of loss impact
• B. Early detection of emerging threats
• C. Identification of controls gaps that may lead to noncompliance
• D. Prioritization of risk action plans across departments

Correct answer: A

Explanation

Engaging the risk owner allows for a more precise evaluation of the potential impact of losses since they have firsthand knowledge of the risks involved. The other options, while beneficial, focus on different aspects of risk management, such as threat detection and compliance, which do not directly relate to the measurement of loss impact.