nerdexam
Isaca

CRISC · Question #146

Business management is seeking assurance from the CIO that IT has a plan in place for early identification of potential issues that could impact the delivery of a new application Which of the…

The correct answer is D. Include business management on a weekly risk and issues report. To assure business management and enhance successful application delivery, the CIO should ensure regular communication of potential issues by including business management on a weekly risk and issues report.

Submitted by weili_xi· Apr 18, 2026Risk Response and Reporting

Question

Business management is seeking assurance from the CIO that IT has a plan in place for early identification of potential issues that could impact the delivery of a new application Which of the following is the BEST way to increase the chances of a successful delivery'?

Options

  • AImplement a release and deployment plan
  • BConduct comprehensive regression testing.
  • CDevelop enterprise-wide key risk indicators (KRls)
  • DInclude business management on a weekly risk and issues report

How the community answered

(31 responses)
  • A
    10% (3)
  • B
    16% (5)
  • C
    3% (1)
  • D
    71% (22)

Why each option

To assure business management and enhance successful application delivery, the CIO should ensure regular communication of potential issues by including business management on a weekly risk and issues report.

AImplement a release and deployment plan

Implementing a release and deployment plan is an important step for execution but does not directly address early identification and communication of *potential issues* to business management during development.

BConduct comprehensive regression testing.

Conducting comprehensive regression testing verifies existing functionality after changes but is a quality assurance activity, not primarily an early warning system for overall project issues to business management.

CDevelop enterprise-wide key risk indicators (KRls)

Developing enterprise-wide key risk indicators (KRIs) is a strategic risk management tool, but a weekly report directly communicates specific project risks and issues relevant to a particular application delivery.

DInclude business management on a weekly risk and issues reportCorrect

Including business management on a weekly risk and issues report provides them with transparent, timely updates on potential blockers and challenges, enabling early awareness and involvement in resolution. This direct communication fosters trust, demonstrates proactive issue identification, and allows business stakeholders to contribute to decisions that impact successful application delivery.

Concept tested: Project risk communication & stakeholder assurance

Source: https://www.pmi.org/learning/library/risk-management-project-communication-1100

Topics

#Risk reporting#Stakeholder communication#Project risk management#Business assurance

Community Discussion

No community discussion yet for this question.

Full CRISC Practice