Certified in Risk and Information Systems Control (CRISC) — Question 850

Which of the following BEST helps to identify significant events that could impact an organization?

Answer options

• A. Vulnerability analysis
• B. Scenario analysis
• C. Heat map analysis
• D. Control analysis

Correct answer: B

Explanation

Scenario analysis is effective because it allows organizations to explore various future events and their possible impacts, helping to prepare for uncertainties. Vulnerability analysis focuses on weaknesses, heat map analysis represents data visually, and control analysis reviews existing measures, but none specifically prioritize identifying significant future events like scenario analysis does.