CRISC Certified in Risk and Information Systems Control – Question322

Which of the following is NOT true for effective risk communication?

A.
Risk information must be known and understood by all stakeholders.
B. Use of technical terms of risk
C. Any communication on risk must be relevant
D. For each risk, critical moments exist between its origination and its potential business consequence

Correct Answer: B

Explanation:

Explanation:
For effective communication, information communicated should not inundate the recipients. All ground rules of good communication apply to communication on risk. This includes the avoidance of jargon and technical terms regarding risk because the intended audiences are generally not deeply technologically skilled. Hence use of technical terms is avoided for effective communication
Incorrect Answers: A, C, D: These all are true for effective risk communication. For effective risk communication the risk information should be clear, concise, useful and timely. Risk information must be known and understood by all the stakeholders. Information or communication should not overwhelm the recipients. This includes the avoidance of technical terms regarding risk because the intended audiences are generally not much technologically skilled.
Any communication on risk must be relevant. Technical information that is too detailed or is sent to inappropriate parties will hinder, rather than enable, a clear view of risk. For each risk, critical moments exist between its origination and its potential business consequence.
Information should also be aimed at the correct target audience and available on need-to-know basis. Hence for effective risk communication risk information should be:

  • Clear
  • Concise
  • Useful
  • Timely given
  • Aimed at the correct audience
  • Available on need-to-know basis