MENU
A risk practitioner has collaborated with subject matter experts from the IT department to develop a large list of potential key risk indicators (KRIs) for all IT operations within the organization Of the following, who should review the completed list and select the appropriate KRIs for implementation?
Suggested Answer: D
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
JO
Josephine
11 months ago
I’m surprised no one mentioned the importance of collaboration here.
EA
Earleen
11 months ago
Totally agree with IT security managers leading this!
TE
Teresita
12 months ago
Wait, why aren't IT auditors in the mix? Seems odd.
CO
Coleen
12 months ago
IT control owners have the best insight for this, though.
TE
Tennie
12 months ago
I think IT risk owners should definitely review the KRIs.
GO
Goldie
1 year ago
I recall a practice question where IT security managers were involved in risk assessments, but I’m not confident they would be the best for selecting KRIs.
CH
Cherri
1 year ago
I feel like IT auditors might be too focused on compliance rather than operational effectiveness when it comes to KRIs.
TA
Tashia
1 year ago
I'm not entirely sure, but I think IT control owners would have a good understanding of what indicators are relevant for their specific areas.
LE
Leslie
1 year ago
I remember we discussed that IT risk owners are usually responsible for managing risks, so they might be the right choice for selecting KRIs.
KI
Kizzy
1 year ago
This looks like a tricky IPv6 routing question. I'll need to carefully review the information in the packet capture and the answer choices to determine the correct statement.
IL
Iluminada
1 year ago
Hmm, I'm a bit confused by this one. I need to make sure I fully understand the impact of the deferred compensation and the tax expense adjustment before I can decide on the right answer.
QU
Quinn
1 year ago
Hmm, I'm a bit unsure about this one. I know we need to authenticate users, but I'm not sure if creating a membership database or configuring a SAML endpoint is the right first step. I'll have to think this through carefully.