hardMultiple ChoiceObjective-mapped
CRISC Practice Question: A multinational organization uses multiple risk…
A multinational organization uses multiple risk management systems that do not integrate with each other. The risk team manually consolidates data into a spreadsheet for reporting. This process is error-prone and time-consuming. Which of the following is the BEST long-term solution to improve risk monitoring and reporting?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement a centralized governance, risk, and compliance (GRC) platform with automated data feeds
Implementing a centralized GRC platform with data feeds from all systems automates integration and reduces errors. Option A is wrong because standardizing spreadsheets still requires manual consolidation. Option C is wrong because training does not address the system integration issue. Option D is wrong because simply adding more manual reviews increases overhead.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Standardize the spreadsheet format across all departments
Why it's wrong here
Standardizing spreadsheets still requires manual consolidation, which does not address the root cause of system integration issues.
- ✓
Implement a centralized governance, risk, and compliance (GRC) platform with automated data feeds
Why this is correct
A centralized GRC platform with automated data feeds integrates all risk management systems, reducing errors and improving efficiency.
- ✗
Train risk owners on how to better manually report risks
Why it's wrong here
Training risk owners on manual reporting does not solve the integration problem and may still be error-prone.
- ✗
Assign dedicated staff to perform additional manual reviews of the spreadsheet
Why it's wrong here
Assigning dedicated staff for manual reviews increases overhead and does not fix the underlying integration issue.
Go deeper
Related to this question
About these practice questions
This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.