CRISC Certified in Risk and Information Systems Control – Question188

While developing obscure risk scenarios, what are the requirements of the enterprise? Each correct answer represents a part of the solution. Choose two.

A. Have capability to cure the risk events
B. Have capability to recognize an observed event as something wrong
C. Have sufficient number of analyst
D. Be in a position that it can observe anything going wrong

Correct Answer: BD

Explanation:

Explanation:
The enterprise must consider risk that has not yet occurred and should develop scenarios around unlikely, obscure or non-historical events.
Such scenarios can be developed by considering two things:

  • Visibility
  • Recognition
  • [/*]
  • For the fulfillment of this task enterprise must:
  • [*]
  • Be in a position that it can observe anything going wrong
  • Have the capability to recognize an observed event as something wrong

Incorrect Answers: A, C: These are not the direct requirements for developing obscure risk scenarios, like curing risk events comes under process of risk management. Hence capability of curing risk event does not lay any impact on the process of development of risk scenarios.