Certified in Risk and Information Systems Control (CRISC) — Question 199

Which of the following BEST enables a risk practitioner to enhance understanding of risk among stakeholders?

Answer options

• A. Threat analysis
• B. Key risk indicators
• C. Risk scenarios
• D. Business impact analysis

Correct answer: C

Explanation

Risk scenarios are narratives that illustrate potential risk events and their impacts, making the concept of risk more relatable and understandable for stakeholders. While threat analysis, key risk indicators, and business impact analysis all provide valuable insights, they do not convey risk in a way that is as easily digestible as risk scenarios.