CRISC IT Risk Assessment Techniques 2

Question 1

The Delphi technique is MOST useful in risk assessment for which purpose?

Accepted Answer

Reaching consensus among experts without groupthink bias

Answer

The Delphi technique uses structured, anonymous rounds of expert input to build consensus on risk assessments while minimizing groupthink.

Question 2

When assessing the impact of a risk, a CRISC practitioner should consider which dimension FIRST?

Accepted Answer

Business impact rather than technical impact

Answer

Business impact (financial, reputational, operational) should be the primary consideration because it directly connects risk to organizational objectives.

Question 3

Which risk assessment output BEST supports prioritization of risk remediation efforts?

Accepted Answer

A risk heat map showing likelihood vs. impact

Answer

A risk heat map visually plots risks by likelihood and impact, making it easy to prioritize the highest-priority risks for remediation.

Question 4

In IT risk assessment, exposure factor (EF) represents:

Accepted Answer

The percentage of an asset's value lost if a threat event occurs

Answer

The exposure factor is the percentage of an asset's value that would be lost in a single threat event, used to calculate Single Loss Expectancy.

Question 5

A risk assessment that evaluates risks AFTER controls are applied is measuring:

Accepted Answer

Residual risk

Answer

Residual risk is the level of risk remaining after controls have been implemented, representing the organization's actual remaining exposure.

CRISC - Certified in Risk and Information Systems Control Practice Test

CRISC - Certified in Risk and Information Systems Control Practice Test

CRISC IT Risk Assessment Techniques 2