Certified in Risk and Information Systems Control (CRISC) — Question 346

Which of the following approaches would BEST help to identify relevant risk scenarios?

Answer options

• A. Engage line management in risk assessment workshops
• B. Escalate the situation to risk leadership
• C. Engage internal audit for risk assessment workshops
• D. Review system and process documentation

Correct answer: A

Explanation

Engaging line management in risk assessment workshops is the most effective approach because they have firsthand knowledge of operational risks and can provide valuable insights. The other options, while useful, do not directly involve those who are most familiar with the daily operations and risks, making them less effective for identifying relevant scenarios.