CRISC Certified in Risk and Information Systems Control – Question601

Which of the following is MOST helpful in identifying new risk exposures due to changes in the business environment?

A.
Industry benchmarking
B. Standard operating procedures
C. Control gap analysis
D. SWOT analysis

Correct Answer: D