Certified in Risk and Information Systems Control (CRISC) — Question 918

Which of the following is the PRIMARY reason for sharing risk assessment reports with senior stakeholders?

Answer options

• A. To enable senior management to compile a risk profile
• B. To support decision-making for risk response
• C. To secure resourcing for risk treatment efforts
• D. To hold risk owners accountable for risk action plans

Correct answer: B

Explanation

The correct answer, B, emphasizes that sharing risk assessment reports is crucial for helping senior stakeholders make informed decisions about how to respond to identified risks. The other options, while relevant to risk management, do not capture the primary focus of decision-making that the reports facilitate.