CRISC Certified in Risk and Information Systems Control – Question746 Which of the following should be included in a risk scenario to be used for risk analysis? A. Residual risk B. Risk tolerance C. Risk appetite D. Threat type Show Answer Hide Answer Correct Answer: D