Certified in Risk and Information Systems Control (CRISC) — Question 729

A management team is on an aggressive mission to launch a new product to penetrate new markets and overlooks IT risk factors, threats, and vulnerabilities. This scenario BEST demonstrates an organization's risk:

Answer options

• A. management.
• B. analysis.
• C. culture.
• D. tolerance.

Correct answer: C

Explanation

The correct answer is C, as the scenario highlights a lack of awareness and consideration for IT risks within the organizational culture. Options A and B focus on processes and assessment methods that do not address the underlying mindset towards risk, while option D pertains to the level of acceptable risk rather than the attitude towards it.