nerdexam
Isaca

CRISC · Question #130

Which of the following is the MOST useful information for a risk practitioner when planning response activities after risk identification?

The correct answer is C. Risk priorities. When planning risk response activities, risk priorities are the most useful information as they guide practitioners on which risks require immediate attention and resource allocation.

Submitted by ravi_2018· Apr 18, 2026Risk Response and Reporting

Question

Which of the following is the MOST useful information for a risk practitioner when planning response activities after risk identification?

Options

  • ARisk register
  • BRisk appetite
  • CRisk priorities
  • DRisk heat maps

How the community answered

(34 responses)
  • A
    12% (4)
  • B
    6% (2)
  • C
    79% (27)
  • D
    3% (1)

Why each option

When planning risk response activities, risk priorities are the most useful information as they guide practitioners on which risks require immediate attention and resource allocation.

ARisk register

A risk register is a comprehensive list of all identified risks, but without prioritization, it doesn't alone tell the practitioner which risks to address first in response planning.

BRisk appetite

Risk appetite defines the overall level of risk an organization is willing to accept, which is a strategic guiding principle, but it doesn't provide the granular detail needed to prioritize individual risks for specific response activities.

CRisk prioritiesCorrect

Risk priorities, derived from factors like likelihood and impact, directly indicate which risks are most critical and warrant immediate attention and resources during response planning. This helps allocate efforts effectively, focusing on the highest-ranked risks first.

DRisk heat maps

Risk heat maps are visual representations of risks, often showing their likelihood and impact, which aid in understanding the overall risk landscape and can inform priorities, but the priorities themselves are the actionable data for planning responses.

Concept tested: Risk prioritization for response planning

Source: https://csrc.nist.gov/publications/detail/sp/800-39/final

Topics

#Risk response planning#Risk prioritization#Risk management process#Risk information utility

Community Discussion

No community discussion yet for this question.

Full CRISC Practice