Certified in Risk and Information Systems Control (CRISC) — Question 515

When presenting risk, the BEST method to ensure that the risk is measurable against the organization's risk appetite is through the use of a:

Answer options

• A. technology strategy plan
• B. cause-and-effect diagram
• C. risk map
• D. maturity model

Correct answer: C

Explanation

The correct answer is C, a risk map, because it visually represents risks in relation to the organization's risk appetite, making it easier to assess and prioritize them. The other options, while useful in different contexts, do not provide a clear visual representation of risk in relation to appetite, which is crucial for effective risk management.