Certified in Risk and Information Systems Control (CRISC) — Question 719

Which of the following would BEST help an enterprise prioritize risk scenarios?

Answer options

• A. Industry best practices
• B. Degree of variances in the risk
• C. Cost of risk mitigation
• D. Placement on the risk map

Correct answer: D

Explanation

The correct answer is D, as the placement on the risk map visually represents the severity and likelihood of risks, allowing for effective prioritization. Options A, B, and C provide useful information, but they do not offer a structured framework for prioritizing risks as effectively as a risk map does.