Which of the following is a primary benefit of implementing a governance risk management and

Question

Options

• AFewer internal audits
• BMore effective interviews
• CAutomated risk management strategy tools
• DReduced assurance costs

• A
  4% (2)
• B
  4% (2)
• C
  9% (4)
• D
  83% (38)

Explanation

Implementing a GRC (Governance, Risk Management, and Compliance) framework consolidates overlapping assurance activities across audit, risk, and compliance functions - eliminating redundant efforts and sharing evidence, which directly reduces assurance costs (D). Option A is wrong because GRC typically maintains or restructures audits rather than eliminating them; integrated controls may actually surface more audit requirements. Option B is incorrect because interview effectiveness is a human/process skill unrelated to a GRC framework's structural benefits. Option C is a distractor because while GRC platforms may include tooling, "automated risk management strategy tools" describes a feature or input, not the primary benefit of GRC implementation.

Memory tip: Think of GRC as a "shared infrastructure" model - just as shared cloud infrastructure cuts IT costs, shared assurance infrastructure cuts assurance costs. The key word in the question is primary benefit, which points to the economic outcome (cost reduction), not the tools or processes used to get there.

No community discussion yet for this question.