Certified in Risk and Information Systems Control (CRISC) — Question 48

Which of the following BEST illustrates the relationship of actual risk exposure to appetite?

Answer options

• A. Residual risk that exceeds appetite.
• B. Risk events in the risk profile.
• C. Percentage of high risk scenarios.
• D. Controls that exceed risk appetite.

Correct answer: A

Explanation

Option A is correct because it directly shows a scenario where the residual risk is greater than what the organization is willing to accept, illustrating a clear mismatch between actual risk exposure and appetite. The other options do not directly address the comparison between actual risk exposure and appetite, making them less relevant to the question.