nerdexam
Isaca

CRISC · Question #98

A risk practitioner is utilizing a risk heat map during a risk assessment. Risk events that are coded with the same color will have a similar:

The correct answer is B. risk impact. On a risk heat map, different colors typically represent varying levels of risk, which are usually a function of likelihood and impact. Risk events coded with the same color most commonly share a similar level of impact, as color gradients often categorize risks by their potentia

Submitted by mateo_ar· Apr 18, 2026IT Risk Assessment

Question

A risk practitioner is utilizing a risk heat map during a risk assessment. Risk events that are coded with the same color will have a similar:

Options

  • Arisk score
  • Brisk impact
  • Crisk response
  • Drisk likelihood.

How the community answered

(35 responses)
  • B
    91% (32)
  • C
    3% (1)
  • D
    6% (2)

Why each option

On a risk heat map, different colors typically represent varying levels of risk, which are usually a function of likelihood and impact. Risk events coded with the same color most commonly share a similar level of impact, as color gradients often categorize risks by their potential severity or consequences.

Arisk score

While the color on a heat map often represents a combined risk score (likelihood x impact), two risks can have the same risk score with different combinations of likelihood and impact. Therefore, having the same color does not necessarily mean they have exactly the same risk score, though they would be in the same risk level category.

Brisk impactCorrect

A risk heat map visually categorizes risks typically based on their likelihood and impact. When multiple risk events are coded with the same color, it often signifies that they fall into a similar risk category, primarily driven by their potential impact or severity. This means they are expected to have comparable consequences if they materialize, distinguishing them from risks with different color codings representing different impact levels.

Crisk response

Risk response refers to the strategy chosen to address a risk (e.g., mitigate, avoid), which is a decision made after the risk is assessed and categorized, and is not what the color on a heat map directly represents.

Drisk likelihood.

Similar to impact, two risks can have the same color (same overall risk level) but different likelihoods, as long as their combined score (likelihood x impact) falls within the same color band.

Concept tested: Risk heat map interpretation (color meaning)

Topics

#Risk heat map#Risk assessment#Risk impact#Risk visualization

Community Discussion

No community discussion yet for this question.

Full CRISC Practice