Certified in Risk and Information Systems Control (CRISC) — Question 385

The PRIMARY benefit of conducting a risk workshop using a top-down approach instead of a bottom-up approach is the ability to:

Answer options

• A. incorporate subject matter expertise.
• B. identify specific project risk.
• C. understand risk associated with complex processes.
• D. obtain a holistic view of IT strategy risk.

Correct answer: D

Explanation

The primary advantage of a top-down approach is that it allows for a comprehensive perspective on IT strategy risk, which is essential for understanding how various risks interrelate at a strategic level. In contrast, the bottom-up approach focuses more on specific risks and may overlook the broader context, making options A, B, and C less relevant in this scenario.