IsacaIsaca
CRISC · Question #574
CRISC Question #574: Real Exam Question with Answer & Explanation
The correct answer is C: It enhances internal risk reporting.. The primary benefit of a risk profile is that it consolidates and categorizes an organization's risks, significantly improving the clarity and effectiveness of internal risk reporting.
Submitted by hassan_iq· Apr 18, 2026Risk Response and Reporting
Question
Which of the following is the PRIMARY benefit of using a risk profile?
Options
- AIt promotes a security-aware culture.
- BIt enables vulnerability analysis.
- CIt enhances internal risk reporting.
- DIt provides risk information to auditors.
Explanation
The primary benefit of a risk profile is that it consolidates and categorizes an organization's risks, significantly improving the clarity and effectiveness of internal risk reporting.
Common mistakes.
- A. While risk awareness might be a secondary outcome of sharing risk information, a risk profile's primary purpose is not culture promotion.
- B. A risk profile identifies risks, but vulnerability analysis is a separate, more technical process that drills down into specific weaknesses.
- D. Providing information to auditors is an external reporting function, whereas the primary benefit of the profile itself is often for internal understanding and management.
Concept tested. Risk profile primary benefit
Topics
#Risk Profile#Risk Reporting#Internal Communication#Risk Management Benefits
Community Discussion
No community discussion yet for this question.