Certified in Risk and Information Systems Control (CRISC) — Question 710
IT management has asked for a consolidated view into the organization's risk profile to enable project prioritization and resource allocation. Which of the following materials would be MOST helpful?
Answer options
- A. List of key risk indicators
- B. Internal audit reports
- C. IT risk register
- D. List of approved projects
Correct answer: C
Explanation
The IT risk register is the most useful because it provides a comprehensive overview of the risks faced by the organization, which is essential for prioritizing projects and allocating resources effectively. The other materials, while informative, do not provide the same consolidated risk perspective needed for strategic decision-making.