Isaca CRISC Exam - Topic 3 Question 108 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 108
Topic #: 3

Which of the following would BEST enable a risk-based decision when considering the use of an emerging technology for data processing?

AGap analysis

BThreat assessment

CResource skills matrix

DData quality assurance plan

Show Suggested Answer

Suggested Answer: A

The best way to enable a risk-based decision when considering the use of an emerging technology for data processing is to perform a gap analysis. A gap analysis is a technique that compares the current state and the desired state of a process, system, or capability, and identifies the gaps or differences between them. A gap analysis can help to evaluate the benefits, costs, risks, and opportunities of using an emerging technology for data processing, and to determine the feasibility, suitability, and readiness of adopting the emerging technology. The other options are not as helpful as a gap analysis, as they are related to the specific aspects or components ofthe data processing, not the overall assessment and comparison of the current and desired state of the data processing.Reference:= Risk and Information Systems Control Study Manual, Chapter 1: IT Risk Identification, Section 1.2: IT Risk Identification Methods, page 19.

by Beatriz at Jan 27, 2026, 11:02 AM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Olga

1 day ago

I heard the latest tech is like a double-edged sword - use it wisely or it'll cut you!

upvoted 0 times

...

Gladys

6 days ago

Gotta weigh the pros and cons carefully before jumping on the latest data processing trend.

upvoted 0 times

...

Lorrie

11 days ago

Considering the risks is key to making an informed decision on new technologies.

upvoted 0 times

...

Georgeanna

17 days ago

The risk-based approach is crucial when evaluating emerging tech for data processing.

upvoted 0 times

...

Carrol

22 days ago

I think the best approach might involve stakeholder analysis, but I’m not confident if that’s the right angle for this question.

upvoted 0 times

...

Dominga

27 days ago

I feel like we talked about frameworks for risk assessment, but I can't recall the specifics. Could it be related to compliance or regulatory standards?

upvoted 0 times

...

Veronica

2 months ago

I remember a practice question that focused on assessing the impact of technology on data security. Maybe that's a key factor here?

upvoted 0 times

...

Denae

2 months ago

I think we discussed something about evaluating potential risks versus benefits, but I'm not entirely sure how that applies to emerging tech specifically.

upvoted 0 times

...

Clay

2 months ago

I feel pretty confident I could tackle this. I'd focus on assessing the risks and how well the technology addresses the organization's needs in a secure way.

upvoted 0 times

...

Shasta

2 months ago

This is a tricky one. I'd want to look at things like compliance requirements, data sensitivity, and the maturity of the technology before making a decision.

upvoted 0 times

...

Denny

2 months ago

Okay, this seems like it's asking me to weigh the risks versus the potential advantages of the new tech. I'd try to identify the key factors to consider.

upvoted 0 times

...

Slyvia

3 months ago

Hmm, I'm a bit unsure how to approach this. I guess I'd need to research the technology and its use cases to evaluate the risks.

upvoted 0 times

...

Stephen

3 months ago

I think I'd start by considering the potential risks and benefits of the emerging technology. What are the security and privacy implications?

upvoted 0 times

...