Which of the following is the MOST likely reason an organization would engage an independent reviewer to assess its IT risk management program?

A. To identify gaps in the alignment of IT risk management processes and strategy

B. To confirm that IT risk assessment results are expressed in quantitative terms

C. To evaluate threats to the organization's operations and strategy

D. To ensure IT risk management is focused on mitigating emerging risk








 

Suggested Answer: A



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.