Isaca Certified in Risk and Information Systems Control CRISC Question # 323 Topic 33 Discussion
CRISC Exam Topic 33 Question 323 Discussion:
Question #: 323
Topic #: 33
In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?
A standardized risk taxonomy is a common language and structure for identifying, analyzing, and reporting risks across the enterprise. It enables consistent and comparable risk assessment and aggregation, as well as clear communication and coordination among different divisions. A list of control deficiencies, an enterprise risk ownership policy, and an updated risk tolerance metric are not sufficient to enable management of risk at the enterprise level, as they do not address the issue of risk alignment and integration among divisions. References = [CRISC Review Manual (Digital Version)], page 42; CRISC by Isaca Actual Free Exam Q & As, question 197.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit