Certified in Risk and Information Systems Control (CRISC) — Question 530

Which of the following is MOST critical for a risk practitioner to continuously monitor to support senior management's risk-related decision making?

Answer options

• A. Industry best practices in risk management
• B. Types of losses experienced by peer organizations
• C. The organization's risk profile
• D. Threat intelligence sources

Correct answer: C

Explanation

The organization's risk profile is essential for understanding the current risk landscape and making informed decisions. While industry best practices, peer losses, and threat intelligence are important, they serve as supplementary information rather than the core focus needed for effective risk management.