Certified in Risk and Information Systems Control (CRISC) — Question 571

Which of the following provides the MOST useful information for developing key risk indicators (KRIs)?

Answer options

• A. Business impact analysis (BIA) results
• B. Risk scenario ownership
• C. Possible causes of materialized risk
• D. Risk thresholds

Correct answer: D

Explanation

Risk thresholds are critical as they define the acceptable levels of risk and help organizations determine when to take action. While business impact analysis results, risk scenario ownership, and possible causes of materialized risk are important, they do not directly provide the necessary criteria for measuring risk exposure effectively like risk thresholds do.