Certified in Risk and Information Systems Control (CRISC) — Question 600

Which of the following is MOST helpful in preventing risk events from materializing?

Answer options

• A. Maintaining the risk register
• B. Reviewing and analyzing security incidents
• C. Establishing key risk indicators (KRIs)
• D. Prioritizing and tracking issues

Correct answer: C

Explanation

Establishing key risk indicators (KRIs) is essential as they provide early warnings of potential risk events, allowing proactive measures. While maintaining the risk register, reviewing security incidents, and tracking issues are important, they are more reactive and do not focus on the early identification of risks like KRIs do.