Certified in Risk and Information Systems Control (CRISC) — Question 691

The BEST way to justify the risk mitigation actions recommended in a risk assessment would be to:

Answer options

• A. focus on the business drivers
• B. reference best practice
• C. benchmark with competitor's actions
• D. align with audit results

Correct answer: A

Explanation

Focusing on the business drivers ensures that the risk mitigation actions align with the organization's strategic objectives, making them more relevant and justifiable. While referencing best practices, benchmarking against competitors, and aligning with audit results can provide useful context, they do not directly tie the recommendations to the specific needs and goals of the business.