easyMultiple ChoiceObjective-mapped
CRISC Practice Question: Which TWO of the following are best practices for…
Which TWO of the following are best practices for risk reporting to senior management?
⚠ Common exam trap
Watch out — candidates often confuse transparency with completeness, failing to recognize that senior management needs distilled, actionable insights rather than exhaustive data dumps.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Provide actionable recommendations based on risk trends
Risk reporting to senior management should be actionable, focusing on trends and recommendations that enable informed decision-making. Senior leaders need concise, strategic insights rather than raw data, so providing recommendations based on risk trends aligns with the principle of risk-based decision support.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Provide actionable recommendations based on risk trends
Why this is correct
Actionable insights drive decision-making.
- ✗
Avoid discussing risk appetite to prevent confusion
Why it's wrong here
Risk appetite context is essential for informed decisions.
- ✗
Present detailed technical analysis for every risk
Why it's wrong here
Senior management prefers summarized, strategic information.
- ✓
Focus on key risk areas and exceptions
Why this is correct
Highlighting exceptions helps management focus on critical issues.
- ✗
Include all available risk data for transparency
Why it's wrong here
Too much data can lead to information overload.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.