nerdexam
Isaca

CRISC · Question #389

When reporting to senior management on changes in trends related to IT risk, which of the following is MOST important?

The correct answer is A. Materiality. Materiality is most important when reporting IT risk trends to senior management, as it focuses on the significance of risks concerning their potential impact on business objectives and financial performance.

Submitted by jakub_pl· Apr 18, 2026Risk Response and Reporting

Question

When reporting to senior management on changes in trends related to IT risk, which of the following is MOST important?

Options

  • AMateriality
  • BConfidentiality
  • CMaturity
  • DTransparency

How the community answered

(17 responses)
  • A
    76% (13)
  • B
    12% (2)
  • C
    6% (1)
  • D
    6% (1)

Why each option

Materiality is most important when reporting IT risk trends to senior management, as it focuses on the significance of risks concerning their potential impact on business objectives and financial performance.

AMaterialityCorrect

When reporting IT risk trends to senior management, materiality is paramount. Senior management primarily focuses on information that is significant enough to influence their strategic decisions and the overall health of the organization. Materiality refers to the potential impact (financial, operational, reputational) that a risk or a trend in risk could have on the organization's objectives, which dictates its importance and urgency to leadership.

BConfidentiality

Confidentiality is crucial for protecting sensitive risk information but is a characteristic of the information itself, not the most important aspect for reporting trends to senior management.

CMaturity

Maturity refers to the sophistication of the risk management program and, while relevant, is a secondary concern compared to the actual impact and significance of the risks themselves.

DTransparency

Transparency in reporting is important for building trust, but materiality determines what information is most critical for senior management to be transparent about regarding IT risk trends.

Concept tested: IT risk reporting to management

Source: https://learn.microsoft.com/en-us/compliance/regulatory/risk-governance#risk-reporting-and-communication

Topics

#Risk Reporting#Materiality#Senior Management Communication#IT Risk Trends

Community Discussion

No community discussion yet for this question.

Full CRISC Practice