Certified in Risk and Information Systems Control (CRISC) — Question 71

A risk practitioner is summarizing the results of a high-profile risk assessment sponsored by senior management. The BEST way to support risk-based decisions by senior management would be to:

Answer options

• A. quantify key risk indicators (KRIs)
• B. recommend risk tolerance thresholds
• C. provide a quantified detailed analysis
• D. map findings to objectives

Correct answer: D

Explanation

Mapping findings to objectives ensures that senior management can see how risks impact their strategic goals, making it easier to make informed decisions. While quantifying KRIs, recommending risk tolerance thresholds, and providing detailed analyses are valuable, they do not directly link risk findings to the organization's objectives, which is critical for effective decision-making.