Certified in Risk and Information Systems Control (CRISC) — Question 692

Which of the following is the MOST important consideration when developing an organization's risk taxonomy?

Answer options

• A. IT strategy
• B. Leading industry frameworks
• C. Business context
• D. Regulatory requirements

Correct answer: C

Explanation

The most important consideration is the Business context because it provides a clear understanding of the organization's unique environment and risks. While IT strategy, leading industry frameworks, and regulatory requirements are also important, they should align with the specific business context to be effective.