nerdexam
Isaca

CRISC · Question #471

Which of the following is the MOST important consideration for the board and senior leadership regarding the organization's approach to risk management for emerging technologies?

The correct answer is C. Ensuring the risk framework and policies are suitable for emerging technologies. For emerging technologies, the board and senior leadership must primarily ensure the foundational risk framework and policies are adaptable and suitable to manage novel risks.

Submitted by anna_se· Apr 18, 2026Governance

Question

Which of the following is the MOST important consideration for the board and senior leadership regarding the organization's approach to risk management for emerging technologies?

Options

  • AEnsuring the organization follows risk management industry best practices
  • BEnsuring IT risk scenarios are updated and include emerging technologies
  • CEnsuring the risk framework and policies are suitable for emerging technologies
  • DEnsuring threat intelligence services are used to gather data about emerging technologies

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    15% (4)
  • C
    73% (19)
  • D
    4% (1)

Why each option

For emerging technologies, the board and senior leadership must primarily ensure the foundational risk framework and policies are adaptable and suitable to manage novel risks.

AEnsuring the organization follows risk management industry best practices

Following best practices is important but less fundamental than ensuring the core framework itself is suitable for new tech, which might require adapting or creating new practices.

BEnsuring IT risk scenarios are updated and include emerging technologies

Updating IT risk scenarios is an operational step within the risk management process, whereas the board's primary concern is the strategic suitability of the underlying framework.

CEnsuring the risk framework and policies are suitable for emerging technologiesCorrect

The board and senior leadership have a governance role to ensure the overall risk management framework and its guiding policies are robust enough to address the unique and evolving risks posed by emerging technologies.

DEnsuring threat intelligence services are used to gather data about emerging technologies

Using threat intelligence is a specific tactical measure to gather information, not the most overarching strategic consideration for the board regarding the entire approach.

Concept tested: Risk governance for emerging technologies

Topics

#Governance#Risk Framework#Emerging Technologies Risk#Strategic Risk Management

Community Discussion

No community discussion yet for this question.

Full CRISC Practice