Isaca CRISC Exam - Topic 1 Question 42 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 42
Topic #: 1

Which of the following should be of MOST concern to a risk practitioner reviewing an organization risk register after the completion of a series of risk assessments?

ASeveral risk action plans have missed target completion dates.

BSenior management has accepted more risk than usual.

CRisk associated with many assets is only expressed in qualitative terms.

DMany risk scenarios are owned by the same senior manager.

Show Suggested Answer

Suggested Answer: A

by Justine at May 04, 2022, 02:20 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annamae

4 months ago

I disagree, I think it's fine if management is okay with the risks.

upvoted 0 times

...

Pura

4 months ago

Wait, why are so many scenarios owned by one manager? That seems risky!

upvoted 0 times

...

Grover

4 months ago

Qualitative risk descriptions can be misleading, for sure.

upvoted 0 times

...

Juan

4 months ago

I think senior management accepting more risk is a huge concern.

upvoted 0 times

...

Johnna

5 months ago

Missing target completion dates is a big red flag!

upvoted 0 times

...

Lauran

5 months ago

Having many risk scenarios owned by the same senior manager seems concerning too. It could lead to a conflict of interest, but I’m not sure how that compares to the other options.

upvoted 0 times

...

Huey

5 months ago

I'm a bit uncertain about the qualitative terms for asset risks. I feel like we covered something about the importance of quantifying risks, but I can't recall the details.

upvoted 0 times

...

Ahmed

5 months ago

I think senior management accepting more risk than usual could be a big red flag. It reminds me of a practice question where we had to evaluate risk tolerance levels.

upvoted 0 times

...

Elouise

5 months ago

I remember we discussed how missed target completion dates can indicate a lack of accountability, but I'm not sure if that's the most critical issue here.

upvoted 0 times

...

Antonio

5 months ago

Hmm, this seems like a tricky one. I'll need to think through the options carefully to make sure I understand the requirements.

upvoted 0 times

...

Luis

5 months ago

Okay, I've got this. Six Sigma means the process capability has to be at least 1, so the answer is True.

upvoted 0 times

...

Roosevelt

5 months ago

This seems straightforward. I'm pretty confident that option C is the correct answer - a Workspace can include one or more Dashboards, and Dashboards can include one or more iViews.

upvoted 0 times

...

Markus

5 months ago

I'm a bit stumped on this one. Secondary truncation point management isn't something I'm super familiar with. I'll have to make an educated guess and hope for the best.

upvoted 0 times

...