Certified in Risk and Information Systems Control (CRISC) — Question 433

Which of the following elements is MOST essential when creating risk scenarios?

Answer options

• A. Identified vulnerabilities
• B. Business impact and cost analysis
• C. Historical organizational and industry risk factors
• D. A comprehensive control framework

Correct answer: B

Explanation

The correct answer, B, emphasizes the importance of understanding the business impact and cost implications of risks, which is crucial for effective risk management. While identified vulnerabilities, historical risk factors, and a control framework are important, they do not directly assess the potential consequences on the business, which is essential for prioritizing risk responses.