Isaca Certified in Risk and Information Systems Control CRISC Question # 212 Topic 22 Discussion
CRISC Exam Topic 22 Question 212 Discussion:
Question #: 212
Topic #: 22
In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?
A standardized risk taxonomy is a common language and structure for identifying, analyzing, and reporting risks across the enterprise. It enables consistent and comparable risk assessment and aggregation, as well as clear communication and coordination among different divisions. A list of control deficiencies, an enterprise risk ownership policy, and an updated risk tolerance metric are not sufficient to enable management of risk at the enterprise level, as they do not address the issue of risk alignment and integration among divisions. References = [CRISC Review Manual (Digital Version)], page 42; CRISC by Isaca Actual Free Exam Q&As, question 197.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit