Certified in Risk and Information Systems Control (CRISC) — Question 834

Which of the following is MOST important to consider when determining the value of an asset during the risk identification process?

Answer options

• A. The vulnerability profile of the asset
• B. The size of the asset's user base
• C. The criticality of the asset
• D. The monetary value of the asset

Correct answer: C

Explanation

The criticality of the asset is paramount in understanding its importance to the organization and the potential impact of its loss. While the vulnerability profile, user base size, and monetary value are relevant, they do not capture the asset's overall significance and the consequences of a security breach as effectively as criticality does.