Certified in Risk and Information Systems Control (CRISC) — Question 567

Which of the following is the MOST useful information for a risk practitioner when planning response activities after risk identification?

Answer options

• A. Risk priorities
• B. Risk register
• C. Risk heat maps
• D. Risk appetite

Correct answer: A

Explanation

Risk priorities provide a clear framework for understanding which risks need immediate attention and resources. While the risk register, heat maps, and appetite are important, they do not directly inform the prioritization of response activities as effectively as risk priorities do.