Certified in Risk and Information Systems Control (CRISC) — Question 823

When developing a risk awareness training program, which of the following training topics would BEST facilitate a thorough understanding of risk scenarios?

Answer options

• A. Mapping threats to organizational objectives
• B. Reviewing past audits
• C. Analyzing key risk indicators (KRIs)
• D. Identifying potential sources of risk

Correct answer: A

Explanation

Option A is correct because mapping threats to organizational objectives provides a direct link between risks and the organization's goals, enabling a more comprehensive understanding of risk scenarios. The other options, while relevant, do not directly connect risks to the objectives as effectively, making them less suitable for thorough risk scenario understanding.