CRISC Certified in Risk and Information Systems Control – Question727

Senior management has asked a risk practitioner to develop technical risk scenarios related to a recently developed enterprise resource planning (ERP) system. These scenarios will be owned by the system manager. Which of the following would be the BEST method to use when developing the scenarios?

A.
Bottom-up approach
B. Cause-and-effect diagram
C. Top-down approach
D. Delphi technique

Correct Answer: D