nerdexam
Isaca

CRISC · Question #631

An organization has determined that risk is not being adequately tracked and managed due to a distributed operating model. Which of the following is the BEST way to address this issue?

The correct answer is C. Create a centralized portfolio of risk scenarios. To address inadequate risk tracking and management in a distributed operating model, the best approach is to consolidate all identified risks into a single, comprehensive view.

Submitted by jaden.t· Apr 18, 2026Risk Response and Reporting

Question

An organization has determined that risk is not being adequately tracked and managed due to a distributed operating model. Which of the following is the BEST way to address this issue?

Options

  • AIncrease the frequency of risk assessments.
  • BRevalidate the organization's risk appetite
  • CCreate a centralized portfolio of risk scenarios.
  • DCreate dashboards for risk metrics.

How the community answered

(30 responses)
  • A
    17% (5)
  • B
    3% (1)
  • C
    73% (22)
  • D
    7% (2)

Why each option

To address inadequate risk tracking and management in a distributed operating model, the best approach is to consolidate all identified risks into a single, comprehensive view.

AIncrease the frequency of risk assessments.

Increasing the frequency of risk assessments might generate more data but does not inherently solve the problem of managing that data in a distributed environment.

BRevalidate the organization's risk appetite

Revalidating risk appetite is a foundational governance activity, but it doesn't directly solve the operational challenge of tracking and managing risks across distributed teams.

CCreate a centralized portfolio of risk scenarios.Correct

Creating a centralized portfolio of risk scenarios directly addresses the problem of a 'distributed operating model' by consolidating risk information from various sources into one cohesive repository. This centralization enables consistent tracking, reporting, and management of risks across the entire organization, overcoming the fragmentation inherent in a distributed model.

DCreate dashboards for risk metrics.

Creating dashboards for risk metrics is a reporting mechanism; while useful, it relies on having adequately tracked and managed risk data in the first place, which is the problem.

Concept tested: Centralized risk management

Topics

#Risk Management#Centralized Risk#Distributed Operating Model#Risk Tracking

Community Discussion

No community discussion yet for this question.

Full CRISC Practice