CRISC Certified in Risk and Information Systems Control – Question730

Whether the results of risk analysis should be presented in quantitative or qualitative terms should be based PRIMARILY on the:

A.
specific risk analysis framework being used.
B. results of the risk assessment.
C. requirements of management.
D. organizational risk tolerance.

Correct Answer: A