Certified in Risk and Information Systems Control (CRISC) — Question 222

Which of the following tools is MOST helpful when mapping IT risk management outcomes to organizational objectives?

Answer options

• A. Risk dashboard
• B. RACI chart
• C. Information security risk map
• D. Strategic business plan

Correct answer: D

Explanation

The Strategic business plan is crucial because it outlines the organization's objectives, allowing IT risk management outcomes to be directly linked to these goals. Other options like the Risk dashboard and RACI chart are useful for tracking or defining roles but do not inherently connect risk management to organizational objectives as effectively as a strategic plan does.