Isaca Exam CRISC Topic 1 Question 76 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 76
Topic #: 1

In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?

AA standardized risk taxonomy

BA list of control deficiencies

CAn enterprise risk ownership policy

DAn updated risk tolerance metric

Show Suggested Answer

Suggested Answer: A

by Darrel at May 30, 2024, 06:04 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alona

1 months ago

I bet the exam writers are sitting back and chuckling at us, trying to figure out the 'right' answer. Maybe they just want to see how creatively we can argue our points!

upvoted 0 times

...

Buck

1 months ago

Ah, the age-old question of 'which risk management solution is the best?' It's like trying to pick the perfect flavor of ice cream - they're all delicious in their own way!

upvoted 0 times

...

Raina

1 months ago

An updated risk tolerance metric? Really? I feel like that's just putting a band-aid on the problem. We need a more comprehensive approach to enterprise-wide risk management.

upvoted 0 times

...

Leonardo

1 months ago

I disagree, a list of control deficiencies would be a great starting point. That way, we can address the gaps in our risk management processes before worrying about policies and metrics.

upvoted 0 times

Veta

13 days ago

I think having a centralized risk management policy would help us align all divisions and ensure consistency.

upvoted 0 times

...

Alva

1 months ago

Hmm, I'm not so sure about that. A standardized risk taxonomy seems like it would be a more practical solution to enable consistent risk identification and assessment across the divisions.

upvoted 0 times

Cecil

17 days ago

It would also make it easier to aggregate and compare risks across different divisions.

upvoted 0 times

...

Karan

19 days ago

I agree, having a common language for discussing risks can definitely improve communication and understanding.

upvoted 0 times

...

Annamaria

28 days ago

Standardized risk taxonomy would definitely help in ensuring consistent risk identification and assessment.

upvoted 0 times

...

Chana

2 months ago

I'm not sure about that. I think C) An enterprise risk ownership policy could also be a good option to ensure accountability for managing risk across the organization.

upvoted 0 times

...

I think an enterprise risk ownership policy would be the best option to manage risk at the enterprise level. This would clearly define roles and responsibilities for risk management across the organization.

upvoted 0 times

Alyce

19 days ago

Having a list of control deficiencies would help identify areas that need improvement in risk management.

upvoted 0 times

...

Eun

20 days ago

An enterprise risk ownership policy would ensure accountability and coordination in managing risk at the enterprise level.

upvoted 0 times

...

Daniel

22 days ago

I disagree, I believe an updated risk tolerance metric would provide a better overview of risk across all divisions.

upvoted 0 times

...

Wai

26 days ago

I think a standardized risk taxonomy would be more effective in managing risk at the enterprise level.

upvoted 0 times

...

Tayna

2 months ago

I agree with Ethan. Having a standardized risk taxonomy would help manage risk at the enterprise level by providing a common language for all divisions.

upvoted 0 times

...

Ethan

3 months ago

I think the answer is A) A standardized risk taxonomy.

upvoted 0 times

...

Isaca Exam CRISC Topic 1 Question 76 Discussion

Contribute your Thoughts:

Alona

Buck

Raina

Leonardo

Veta

Alva

Cecil

Karan

Annamaria

Chana

Patria

Alyce

Eun

Daniel

Wai

Tayna

Ethan