Certified in Risk and Information Systems Control (CRISC) — Question 593

When should be a risk practitioner's PRIMARY focus when evaluating a proposed robotic process automation of a business service?

Answer options

• A. License availability
• B. Cost-benefit analysis
• C. Code review
• D. Control capability

Correct answer: D

Explanation

The primary focus should be on Control capability, as it assesses how well the automation can manage risks and maintain compliance. While License availability, Cost-benefit analysis, and Code review are important, they do not directly address the management of risks associated with the automation process.