Certified in Risk and Information Systems Control (CRISC) — Question 326

Which of the following is MOST helpful in identifying new risk exposures due to changes in the business environment?

Answer options

• A. Industry benchmarking
• B. Standard operating procedures
• C. Control gap analysis
• D. SWOT analysis

Correct answer: D

Explanation

The correct answer, SWOT analysis, is effective because it assesses strengths, weaknesses, opportunities, and threats in the context of the changing business environment, thereby identifying new risks. Industry benchmarking, standard operating procedures, and control gap analysis are useful but do not specifically focus on evaluating external changes that could impact risk exposure.