Certified in Risk and Information Systems Control (CRISC) — Question 398

Which of the following is the BEST recommendation of a risk practitioner for an organization that recently changed its organizational structure?

Answer options

• A. Re-validate the corporate risk appetite.
• B. Communicate the new risk profile.
• C. Review and adjust key risk indicators (KRIs).
• D. Implement a new risk assessment process.

Correct answer: A

Explanation

Re-validating the corporate risk appetite is crucial after a structural change, as it ensures that the organization's risk tolerance aligns with its new objectives. The other options, while important, do not directly address the need to reassess the overarching risk appetite in light of the recent changes.