IsacaIsaca
CRISC · Question #261
CRISC Question #261: Real Exam Question with Answer & Explanation
The correct answer is A: Employees. Incentive programs are primarily designed to retain valuable personnel, thereby mitigating the risk of losing skilled employees.
Submitted by tarun92· Apr 18, 2026Risk Response and Reporting
Question
An incentive program is MOST likely implemented to manage the risk associated with loss of which organizational asset?
Options
- AEmployees
- BData
- CReputation
- DCustomer lists
Explanation
Incentive programs are primarily designed to retain valuable personnel, thereby mitigating the risk of losing skilled employees.
Common mistakes.
- B. While employees handle data, incentive programs do not directly manage the risk of data loss; data loss is mitigated by technical controls, policies, and training.
- C. Loss of reputation can be an outcome of other risks, but incentive programs are not a direct mechanism to manage reputation risk, which is typically handled through public relations, ethical practices, and crisis management.
- D. Customer lists are a type of data, and their loss is primarily protected by data security measures, not directly by employee incentive programs.
Concept tested. Risk management of human capital
Topics
#Incentive programs#Human capital risk#Risk mitigation#Organizational assets
Community Discussion
No community discussion yet for this question.