Isaca Certified in Risk and Information Systems Control CRISC Question # 416 Topic 42 Discussion
CRISC Exam Topic 42 Question 416 Discussion:
Question #: 416
Topic #: 42
In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?
A standardized risk taxonomy is a common language and structure for identifying, analyzing, and reporting risks across the enterprise. It enables consistent and comparable risk assessment and aggregation, as well as clear communication and coordination among different divisions. A list of control deficiencies, an enterprise risk ownership policy, and an updated risk tolerance metric are not sufficient to enable management of risk at the enterprise level, as they do not address the issue of risk alignment and integration among divisions. References = [CRISC Review Manual (Digital Version)], page 42; CRISC by Isaca Actual Free Exam Q&As, question 197.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit