Certified in Risk and Information Systems Control (CRISC) — Question 902

A financial organization is considering a project to implement the use of blockchain technology. To help ensure the organization's management team can make informed decisions on the project, which of the following should the risk practitioner reassess?

Answer options

• A. Risk tolerance
• B. Risk classification
• C. Business impact analysis (BIA)
• D. Risk profile

Correct answer: D

Explanation

Reassessing the risk profile is crucial as it provides a comprehensive understanding of the potential risks associated with the blockchain project. The risk tolerance and risk classification are important but do not capture the overall risk landscape as effectively as the risk profile. A Business Impact Analysis (BIA) focuses on operational impacts rather than the broader risk considerations needed for this project.