Isaca Certified in Risk and Information Systems Control CRISC Question # 224 Topic 23 Discussion
CRISC Exam Topic 23 Question 224 Discussion:
Question #: 224
Topic #: 23
During an acquisition, which of the following would provide the MOST useful input to the parent company's risk practitioner when developing risk scenarios for the post-acquisition phase?
A.
Risk management framework adopted by each company
B.
Risk registers of both companies
C.
IT balanced scorecard of each company
D.
Most recent internal audit findings from both companies
The most useful input to the parent company’s risk practitioner when developing risk scenarios for the post-acquisition phase is the risk registers of both companies. The risk register is a document that records the details of the risks, such as their sources, causes, consequences, likelihood, impact, and responses. By reviewing the risk registers of both companies, the risk practitioner can identify the existing and potential risks that may affect the post-acquisition integration, performance, and value. The risk management framework, the IT balancedscorecard, and the most recent internal audit findings are other possible inputs, but they are not as useful as the risk registers. References = ISACA Certified in Risk and Information Systems Control (CRISC) Certification Exam Question and Answers, question 11; CRISC Review Manual, 6th Edition, page 144.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit