Certified in Risk and Information Systems Control (CRISC) — Question 695

The GREATEST benefit of including low-probability, high-impact events in a risk assessment is the ability to:

Answer options

• A. identify root causes for relevant events.
• B. develop understandable and realistic risk scenarios.
• C. perform an aggregated cost-benefit analysis.
• D. develop a comprehensive risk mitigation strategy.

Correct answer: D

Explanation

Including low-probability, high-impact events helps in developing a comprehensive risk mitigation strategy by preparing for significant risks that could have severe consequences, thus ensuring that all potential threats are addressed. The other options focus on aspects that, while important, do not directly contribute to a holistic approach to risk management like a comprehensive strategy does.