IT Risk Identification →hardMultiple ChoiceObjective-mapped

CRISC IT Risk Identification Practice Question

A risk practitioner is developing a risk scenario for a potential ransomware attack. Using the ISACA risk scenario template, which element describes the entity that initiates the attack?

⚠ Common exam trap

Watch out — candidates often confuse 'Actor' with 'Threat type' because both relate to the threat, but the Actor is the who (initiator) while Threat type is the what (category of threat).

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Actor

In the ISACA risk scenario template, the 'Actor' element specifically identifies the entity that initiates or perpetrates the attack. For a ransomware attack, the actor could be an external hacker, a malicious insider, or a cybercriminal group, making option C the correct choice.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Event
Why it's wrong here
Event is the specific occurrence, not the initiator.
✗
Threat type
Why it's wrong here
Threat type categorizes the nature of the threat (e.g., malicious code).
✓
Actor
Why this is correct
Actor is the entity that performs the threat action.
✗
Asset/Resource
Why it's wrong here
Asset/Resource is the target, not the initiator.

Go deeper

CRISC IT Risk Identification Practice Question

Why each option matters

Option-by-option breakdown

Related to this question