Certified in Risk and Information Systems Control (CRISC) — Question 965

Which of the following is the PRIMARY objective of risk management?

Answer options

• A. Minimize business disruptions.
• B. Achieve business objectives.
• C. Identify and analyze risk.
• D. Identify threats and vulnerabilities.

Correct answer: B

Explanation

The primary objective of risk management is to achieve business objectives, which ensures that the organization can operate effectively and reach its goals despite potential risks. While minimizing disruptions, identifying and analyzing risk, and recognizing threats are important tasks, they are all part of the broader goal of achieving business objectives.