Isaca Exam CRISC Topic 11 Question 84 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 84
Topic #: 11

[All CRISC Questions]

Which of the following should be considered FIRST when creating a comprehensive IT risk register?

ARisk management budget

BRisk mitigation policies

CRisk appetite

DRisk analysis techniques

Show Suggested Answer

Suggested Answer: C

by Merlyn at Sep 16, 2024, 12:43 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Helaine

7 months ago

Hmm, I'm going with C) Risk appetite. Gotta know how much risk your company is willing to take on before you can do anything else. Unless of course, you're a risk-loving CEO, then the answer is D) Risk analysis techniques. Yolo!

upvoted 0 times

...

Dierdre

7 months ago

This is a trick question, right? The answer is obviously A) Risk management budget. You can't do any of that other stuff without the right resources!

upvoted 0 times

Malcolm

6 months ago

I agree with the user, A) Risk management budget is the most important.

upvoted 0 times

...

Jennie

6 months ago

No way, it's definitely D) Risk analysis techniques.

upvoted 0 times

...

Vicki

6 months ago

I think C) Risk appetite should be considered first.

upvoted 0 times

...

Louann

7 months ago

D) Risk analysis techniques, no doubt about it. How can you build a comprehensive register without a solid understanding of the risks you're dealing with?

upvoted 0 times

Dierdre

5 months ago

D) Risk analysis techniques are crucial, but we also need to have clear policies in place for how to mitigate those risks.

upvoted 0 times

...

Solange

6 months ago

C) Risk appetite should definitely be considered first, it sets the tone for how much risk the organization is willing to take.

upvoted 0 times

...

Noel

6 months ago

A) Risk management budget is important too, you need to allocate resources to manage the risks.

upvoted 0 times

...

Sylvia

7 months ago

But shouldn't we also look at risk analysis techniques to identify and assess risks accurately?

upvoted 0 times

...

Reta

7 months ago

Definitely B) Risk mitigation policies. You need to have a clear plan in place before you start identifying and analyzing risks.

upvoted 0 times

Rory

6 months ago

Lastly, we can use risk analysis techniques to further assess and prioritize risks.

upvoted 0 times

...

Flo

6 months ago

After that, we can allocate the risk management budget accordingly.

upvoted 0 times

...

Malcom

6 months ago

Once that's in place, we can then consider our risk appetite.

upvoted 0 times

...

Selma

6 months ago

I agree, having a solid risk mitigation policy is crucial.

upvoted 0 times

...

Delisa

7 months ago

I think C) Risk appetite is the most important factor to consider. After all, you can't mitigate risks if you don't know your organization's tolerance for them.

upvoted 0 times