Certified in Risk and Information Systems Control (CRISC) — Question 540

Which of the following would present the GREATEST challenge for a risk practitioner during a merger of two organizations?

Answer options

• A. Disparate platforms for governance, risk, and compliance (GRC) systems
• B. Variances between organizational risk appetites
• C. Dissimilar organizational risk acceptance protocols
• D. Different taxonomies to categorize risk scenarios

Correct answer: B

Explanation

The correct answer is B because differing organizational risk appetites can lead to fundamental disagreements on acceptable levels of risk, complicating decision-making during the merger. While the other options present challenges, they can often be reconciled with processes or systems, whereas aligning risk appetites is more complex and critical to the success of the integration.