CRISC · Question #473
A data center has recently been migrated to a jurisdiction where heavy fines will be imposed should leakage of customer personal data occur. Assuming no other changes to the operating environment, whi
The correct answer is B. Risk impact. Moving to a jurisdiction with heavy fines for data leakage increases the financial consequences of such an event, which directly affects the risk impact.
Question
A data center has recently been migrated to a jurisdiction where heavy fines will be imposed should leakage of customer personal data occur. Assuming no other changes to the operating environment, which factor should be updated to reflect this situation as an input to scenario development for this particular risk event?
Options
- ARisk likelihood
- BRisk impact
- CRisk capacity
- DRisk appetite
How the community answered
(52 responses)- B94% (49)
- C2% (1)
- D4% (2)
Why each option
Moving to a jurisdiction with heavy fines for data leakage increases the financial consequences of such an event, which directly affects the risk impact.
The likelihood of a data leakage event occurring is not inherently changed by the legal jurisdiction; only the consequences of such an event are affected.
New heavy fines directly increase the potential financial consequences if customer personal data leakage occurs, thus increasing the impact of this specific risk event.
Risk capacity refers to the maximum risk an organization can bear, which is a broader strategic decision and not directly changed by the fines for a specific event.
Risk appetite is the level of risk an organization is willing to take, a strategic decision distinct from the objective increase in consequences due to legal changes.
Concept tested: Risk impact factors
Topics
Community Discussion
No community discussion yet for this question.