Certified in Risk and Information Systems Control (CRISC) — Question 177

The PRIMARY reason, a risk practitioner would be interested in an internal audit report is to:

Answer options

• A. maintain a risk register based on noncompliances
• B. plan awareness programs for business managers
• C. assist in the development of a risk profile
• D. evaluate maturity of the risk management process

Correct answer: D

Explanation

The correct answer is D, as evaluating the maturity of the risk management process is crucial for identifying areas of improvement and ensuring that risk practices are effective. Options A, B, and C, while relevant to risk management, do not directly address the primary purpose of reviewing an internal audit report.