Isaca Exam CRISC Topic 9 Question 96 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 96
Topic #: 9

Which of the following is MOST important for a risk practitioner to understand about an organization in order to create an effective risk

awareness program?

APolicies and procedures

BStructure and culture

CKey risk indicators (KRIs) and thresholds

DKnown threats and vulnerabilities

Show Suggested Answer

Suggested Answer: D

by Wynell at Mar 22, 2025, 03:24 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mariko

11 days ago

Honestly, any of these could be the most important. It's like trying to buy a house - you need to know the structure, the neighborhood, the potential problems, and the warning signs. Can't just focus on one piece of the puzzle.

upvoted 0 times

...

Sage

12 days ago

Hmm, I'd say C) Key risk indicators (KRIs) and thresholds are crucial. Gotta have a way to measure and monitor those risks, am I right?

upvoted 0 times

...

Jolene

13 days ago

I dunno, D) Known threats and vulnerabilities sounds pretty important to me. Can't be aware of risks if you don't know what they are!

upvoted 0 times

...

1 months ago

I think understanding the structure and culture of the organization is crucial.

upvoted 0 times

...