Certified in Risk and Information Systems Control (CRISC) — Question 403

Which of the following is MOST important to include in a risk assessment of an emerging technology?

Answer options

• A. Key controls
• B. Risk and control ownership
• C. Risk response plans
• D. Impact and likelihood ratings

Correct answer: D

Explanation

Impact and likelihood ratings are crucial because they help determine the potential consequences and the probability of risks associated with the emerging technology. The other options, while important, do not directly assess the severity and probability of risks, which are fundamental to understanding the overall risk landscape.