CRISC IT Risk Identification Practice Question
A company's risk appetite statement specifies that the organization is willing to accept a moderate level of operational risk to achieve strategic agility. This statement directly influences which activity during IT risk identification?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Establishing risk tolerance thresholds for operational risk
Risk appetite guides which risks are acceptable and helps prioritize risk scenarios, influencing the scope of risk identification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Defining the IT risk universe
Why it's wrong here
The risk universe includes all potential risks, but appetite may filter which are considered acceptable.
- ✗
Determining the risk capacity of the organization
Why it's wrong here
Risk capacity is the maximum risk absorbable, not directly influenced by appetite in identification.
- ✓
Establishing risk tolerance thresholds for operational risk
Why this is correct
Risk appetite translates into tolerance thresholds that guide risk identification and evaluation.
- ✗
Selecting threat intelligence sources
Why it's wrong here
Threat intelligence selection is based on relevance, not directly on risk appetite.
Go deeper
Related to this question
About these practice questions
This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.