crisc question 1010 discussion

View all Certified in Risk and Information Systems Control here
back to isaca forum

Question 1010 Topic 4

Topic 4
The PRIMARY benefit of conducting a risk workshop using a top-down approach instead of a bottom-up approach is the
ability to:

  • A. incorporate subject matter expertise.
  • B. identify specific project risk.
  • C. understand risk associated with complex processes.
  • D. obtain a holistic view of IT strategy risk.
Answer:

A

User Votes:
A 1 votes
50%
B
50%
C 1 votes
50%
D 3 votes
50%
Discussions
0 / 1000
lostwisdom81
6 months, 2 weeks ago

wouldn't bottom up approach be the one involving SME and the top down is the one with the big picture view?