Certified in Risk and Information Systems Control (CRISC) — Question 792

A maturity model is MOST useful to an organization when it:

Answer options

• A. defines a qualitative measure of risk.
• B. provides a reference for progress.
• C. benchmarks against other organizations.
• D. provides risk metrics.

Correct answer: B

Explanation

The correct answer, B, indicates that a maturity model serves as a reference point for tracking an organization's progress over time. Options A and D focus on risk, which, while important, are not the primary function of a maturity model. Option C suggests benchmarking against others, but the main value lies in self-assessment and progress tracking.