Exam CRISC topic 1 question 1252 discussion

Risk assessment

"The risk profile is based on the overall risk posture of the organization reflected in its attentiveness to monitoring the effectiveness of controls A"

Agree with A.

I go with BIA, D. this will include the resources and the analysis.

When developing a risk profile for a system, both risk assessment results and a mapping of resources to business processes can provide valuable information, but risk assessment results typically provide the most comprehensive information. Risk assessment is a systematic process of identifying, analyzing, and evaluating potential risks associated with a system, including threats, vulnerabilities, and potential impacts. Risk assessment results provide a detailed understanding of the potential risks to a system and can help prioritize risk mitigation efforts. On the other hand, mapping resources to business processes involves identifying the assets and resources used by a system and the business processes that rely on them. This mapping can help identify critical resources and processes, which can inform risk assessment and risk mitigation efforts. However, this information alone may not provide a comprehensive understanding of the potential risks to a system.