Certified in Risk and Information Systems Control (CRISC) — Question 345

Which of the following would be the BEST justification to invest in the development of a governance, risk, and compliance (GRC) solution?

Answer options

• A. Facilitating risk-aware decision making by stakeholders.
• B. Demonstrating management commitment to mitigate risk.
• C. Closing audit findings on a timely basis.
• D. Ensuring compliance to industry standards.

Correct answer: A

Explanation

The best justification for investing in a GRC solution is that it facilitates risk-aware decision making by stakeholders, which is crucial for effective risk management. While demonstrating commitment, closing audit findings, and ensuring compliance are important, they are secondary benefits compared to empowering decision makers with the necessary insights to navigate risks.