Which of the following is the FIRST step when identifying risk items related to a new IT project?

A. Review the IT control environment.

B. Conduct a cost-benefit analysis.

C. Review the business case.

D. Conduct a gap analysis.








 

Suggested Answer: C



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.