Certified in Risk and Information Systems Control (CRISC) — Question 981

Which of the following is MOST important to determine as a result of a risk assessment?

Answer options

• A. Risk appetite statement
• B. Process ownership
• C. Risk response options
• D. Risk tolerance levels

Correct answer: C

Explanation

The correct answer is C, as understanding risk response options is essential for addressing identified risks effectively. While the other options, such as risk appetite statement and risk tolerance levels, are important, they serve more as frameworks rather than direct action plans for mitigating specific risks.