nerdexam
Isaca

CGEIT · Question #136

Establishing a uniform definition for likelihood and impact through risk management standards PRIMARILY addresses which of the following concerns?

The correct answer is B. Conflicting interpretations of risk levels. Establishing uniform definitions for likelihood and impact through risk management standards primarily addresses conflicting interpretations of risk levels.

Submitted by tyler.j· Apr 18, 2026Risk Optimization

Question

Establishing a uniform definition for likelihood and impact through risk management standards PRIMARILY addresses which of the following concerns?

Options

  • AInconsistent categories of vulnerabilities
  • BConflicting interpretations of risk levels
  • CInconsistent data classification
  • DLack of strategic IT alignment

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    93% (38)
  • D
    5% (2)

Why each option

Establishing uniform definitions for likelihood and impact through risk management standards primarily addresses conflicting interpretations of risk levels.

AInconsistent categories of vulnerabilities

Inconsistent categories of vulnerabilities relate to asset identification and threat modeling, which are different aspects than the consistent evaluation of likelihood and impact for identified risks.

BConflicting interpretations of risk levelsCorrect

Standardized definitions for likelihood and impact ensure a common understanding and consistent evaluation across different departments or individuals, preventing subjective or conflicting interpretations of overall risk levels.

CInconsistent data classification

Inconsistent data classification is a data governance issue concerning how information is categorized, which is separate from standardizing risk assessment components like likelihood and impact.

DLack of strategic IT alignment

Lack of strategic IT alignment is a broader governance issue; while consistent risk assessment contributes to better decision-making, it doesn't primarily resolve a lack of strategic alignment on its own.

Concept tested: Standardized risk assessment

Source: https://www.isaca.org/resources/isaca-journal/issues/2013/volume-1/the-it-risk-management-framework-developing-it-risk-management

Topics

#Risk management#Risk assessment#Likelihood and impact#Risk interpretation

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice