Certified in Risk and Information Systems Control (CRISC) — Question 249

Reviewing historical risk events is MOST useful for which of the following processes within the risk management life cycle?

Answer options

• A. Risk mitigation
• B. Risk assessment
• C. Risk monitoring
• D. Risk aggregation

Correct answer: B

Explanation

The correct answer is B, as reviewing historical risk events provides valuable insights that enhance the risk assessment process by identifying potential threats and vulnerabilities. The other options, while important in their own right, do not primarily rely on the analysis of historical data to the same extent as risk assessment does.