Certified in Risk and Information Systems Control (CRISC) — Question 172

Which of the following is MOST important when developing risk scenarios?

Answer options

• A. Conducting vulnerability assessments
• B. Reviewing business impact analysis (BIA)
• C. Collaborating with IT audit
• D. Obtaining input from key stakeholders

Correct answer: D

Explanation

Obtaining input from key stakeholders is essential as it ensures that all perspectives and insights are considered in the risk scenario development process. While conducting vulnerability assessments, reviewing BIAs, and collaborating with IT audit are important activities, they do not replace the need for stakeholder involvement, which captures diverse risks and priorities.