CRISC · Question #471
Which of the following is the MOST important consideration for the board and senior leadership regarding the organization's approach to risk management for emerging technologies?
The correct answer is C. Ensuring the risk framework and policies are suitable for emerging technologies. For emerging technologies, the board and senior leadership must primarily ensure the foundational risk framework and policies are adaptable and suitable to manage novel risks.
Question
Which of the following is the MOST important consideration for the board and senior leadership regarding the organization's approach to risk management for emerging technologies?
Options
- AEnsuring the organization follows risk management industry best practices
- BEnsuring IT risk scenarios are updated and include emerging technologies
- CEnsuring the risk framework and policies are suitable for emerging technologies
- DEnsuring threat intelligence services are used to gather data about emerging technologies
How the community answered
(26 responses)- A8% (2)
- B15% (4)
- C73% (19)
- D4% (1)
Why each option
For emerging technologies, the board and senior leadership must primarily ensure the foundational risk framework and policies are adaptable and suitable to manage novel risks.
Following best practices is important but less fundamental than ensuring the core framework itself is suitable for new tech, which might require adapting or creating new practices.
Updating IT risk scenarios is an operational step within the risk management process, whereas the board's primary concern is the strategic suitability of the underlying framework.
The board and senior leadership have a governance role to ensure the overall risk management framework and its guiding policies are robust enough to address the unique and evolving risks posed by emerging technologies.
Using threat intelligence is a specific tactical measure to gather information, not the most overarching strategic consideration for the board regarding the entire approach.
Concept tested: Risk governance for emerging technologies
Topics
Community Discussion
No community discussion yet for this question.