CRISC · Question #631
An organization has determined that risk is not being adequately tracked and managed due to a distributed operating model. Which of the following is the BEST way to address this issue?
The correct answer is C. Create a centralized portfolio of risk scenarios. To address inadequate risk tracking and management in a distributed operating model, the best approach is to consolidate all identified risks into a single, comprehensive view.
Question
An organization has determined that risk is not being adequately tracked and managed due to a distributed operating model. Which of the following is the BEST way to address this issue?
Options
- AIncrease the frequency of risk assessments.
- BRevalidate the organization's risk appetite
- CCreate a centralized portfolio of risk scenarios.
- DCreate dashboards for risk metrics.
How the community answered
(30 responses)- A17% (5)
- B3% (1)
- C73% (22)
- D7% (2)
Why each option
To address inadequate risk tracking and management in a distributed operating model, the best approach is to consolidate all identified risks into a single, comprehensive view.
Increasing the frequency of risk assessments might generate more data but does not inherently solve the problem of managing that data in a distributed environment.
Revalidating risk appetite is a foundational governance activity, but it doesn't directly solve the operational challenge of tracking and managing risks across distributed teams.
Creating a centralized portfolio of risk scenarios directly addresses the problem of a 'distributed operating model' by consolidating risk information from various sources into one cohesive repository. This centralization enables consistent tracking, reporting, and management of risks across the entire organization, overcoming the fragmentation inherent in a distributed model.
Creating dashboards for risk metrics is a reporting mechanism; while useful, it relies on having adequately tracked and managed risk data in the first place, which is the problem.
Concept tested: Centralized risk management
Topics
Community Discussion
No community discussion yet for this question.