CRISC Certified in Risk and Information Systems Control – Question536

An organization is considering acquiring a new line of business and wants to develop new IT risk scenarios to guide its decisions. Which of the following would add the MOST value to the new risk scenarios?

A.
Audit findings
B. Expected losses
C. Cost-benefit analysis
D. Organizational threats

Correct Answer: D