Certified in Risk and Information Systems Control (CRISC) — Question 509

The PRIMARY purpose of using a framework for risk analysis is to:

Answer options

• A. help define risk tolerance
• B. help develop risk scenarios
• C. improve consistency
• D. improve accountability.

Correct answer: C

Explanation

The primary aim of employing a framework for risk analysis is to enhance consistency in the evaluation process, ensuring comparable and reliable results. While defining risk tolerance, developing scenarios, and improving accountability are important, they are secondary benefits that arise from a consistent approach to risk assessment.