CRISC · Question #519
A risk practitioner identifies an increasing trend of employees copying company information unrelated to their job functions to USB drives. Which of the following elements of the risk register…
The correct answer is D. Risk likelihood. An increasing trend of unauthorized data copying to USB drives directly indicates a heightened probability of a data loss event, therefore, the risk likelihood element in the risk register should be updated. This observation signifies an increased chance of the risk…
Question
A risk practitioner identifies an increasing trend of employees copying company information unrelated to their job functions to USB drives. Which of the following elements of the risk register should be updated to reflect this observation?
Options
- ARisk impact
- BKey risk indicator (KRI)
- CRisk appetite
- DRisk likelihood
How the community answered
(66 responses)- A2% (1)
- B2% (1)
- C6% (4)
- D91% (60)
Why each option
An increasing trend of unauthorized data copying to USB drives directly indicates a heightened probability of a data loss event, therefore, the risk likelihood element in the risk register should be updated. This observation signifies an increased chance of the risk materializing.
Risk impact refers to the severity of consequences if the risk materializes, which hasn't changed solely due to the trend.
While this trend could be a KRI, the KRI itself triggers an update to the *likelihood* of the specific risk.
Risk appetite is the organization's overall willingness to take on risk, not a specific risk attribute that changes due to an observed trend.
An increasing trend of employees copying unauthorized company information to USB drives directly points to a higher probability or frequency of a data breach or loss event occurring. This observation is a direct indicator that the *likelihood* of the associated risk materializing has increased.
Concept tested: Risk register updates (likelihood)
Topics
Community Discussion
No community discussion yet for this question.