CRISC IT Risk Identification Practice Question
When developing IT risk scenarios, connecting them to business impact is critical. Which of the following BEST describes how a risk practitioner should link a technical scenario to business impact?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Quantify the impact in terms of financial loss, regulatory penalty, and operational disruption
The correct approach is to map the technical scenario to specific business outcomes such as financial loss, regulatory penalties, or reputational damage, allowing management to understand the significance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assign a likelihood rating and an inherent risk score
Why it's wrong here
Risk scoring is separate from impact description.
- ✓
Quantify the impact in terms of financial loss, regulatory penalty, and operational disruption
Why this is correct
Correct. This directly links the scenario to business-relevant consequences.
- ✗
Describe the technical steps of the attack in detail
Why it's wrong here
This does not connect to business impact.
- ✗
Reference industry benchmarks for similar scenarios
Why it's wrong here
Benchmarks may support analysis but do not directly connect to business impact.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CRISC question from scratch — 983 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.