Exam CRISC topic 1 question 433 discussion

Right answer is C

C. Control performance with risk tolerance of business owners Aligning control KPIs with the risk tolerance of business owners ensures that the performance of the controls is directly related to the level of risk the business is willing to accept. This alignment helps in setting appropriate and meaningful KPI thresholds that reflect the actual risk appetite and tolerance of the organization. It ensures that the controls are not too lax (leading to unacceptable levels of risk) or too stringent (which could lead to unnecessary costs or hinder business operations).

C. control performance with risk tolerance of business owners When defining thresholds for control key performance indicators (KPIs), it is MOST helpful to align "C. control performance with risk tolerance of business owners." KPI thresholds should be set in a way that reflects the acceptable level of risk tolerance established by the business owners or stakeholders. This ensures that the controls are monitored in a manner that aligns with the organization's risk appetite and that deviations beyond acceptable limits trigger appropriate actions. While the other options (A. key risk indicators (KRIs) with risk appetite of the business, B. the control key performance indicators (KPIs) with audit findings, D. information risk assessments with enterprise risk assessments) also relate to risk management and control monitoring, aligning control performance with the risk tolerance of business owners is directly relevant to setting meaningful thresholds for control KPIs.

When defining thresholds for control key performance indicators (KPIs), aligning the control performance with the risk tolerance of the business owners is the most beneficial approach. KPIs measure how effectively a company is achieving its key business objectives. If the control performance aligns with the risk tolerance of business owners, then the KPIs will effectively measure the desired outcomes.

Keeping in context with the question, KPI for controls, C makes the most sense.

Agree.

Should be B