Certified in Risk and Information Systems Control (CRISC) — Question 592

Which of the following is the MOST important activity when identifying relevant risk data?

Answer options

• A. Performing peer reviews of the risk register
• B. Interpreting IT assessment findings and data
• C. Checking and maintaining data of incident response plans
• D. Mapping IT resource data to business processes

Correct answer: D

Explanation

Mapping IT resource data to business processes is crucial as it helps in understanding how risks affect business operations. The other options, while valuable, do not directly relate to the identification of risk data in the context of business impact as effectively as option D.