Certified in Risk and Information Systems Control (CRISC) — Question 343

Which of the following is the GREATEST benefit when enterprise risk management (ERM) provides oversight of IT risk management?

Answer options

• A. Prioritizing internal departments that provide service to customers
• B. Ensuring the IT budget and resources focus on risk management
• C. Ensuring senior management's primary focus is on the impact of identified risk
• D. Aligning IT with short-term and long-term goals of the organization

Correct answer: D

Explanation

The correct answer, D, highlights the importance of aligning IT initiatives with the overall goals of the organization, ensuring that resources are effectively utilized. Options A, B, and C, while beneficial, do not capture the overarching strategy of aligning IT with organizational objectives, which is crucial for long-term success.