COBIT 2019 Foundation Certificate · Free Practice Question Easy
Question 45
Which of the following BEST identifies the sort of I&T- related risk to which the enterprise is currently exposed?
-
A
Risk appetite
-
B
Risk profile
-
C
Risk tolerance
Reveal correct answer
Correct answer: B
A. Risk appetite refers to the amount and type of risk that an organization is willing to take in pursuit of its objectives. While risk appetite is an important concept in risk management, it does not specifically identify the type of I&T-related risk that the enterprise is currently exposed to.
B. Risk profile is the collection of information about an organization's risks, including their likelihood and potential impact. It helps to identify and prioritize risks, providing a clear picture of the types of risks the enterprise is currently exposed to. Therefore, it is the best choice for identifying the sort of I&T-related risk the enterprise is facing.
C. Risk tolerance refers to the level of risk that an organization is willing to accept or take on. While risk tolerance is important in determining how much risk is acceptable, it does not specifically identify the type of I&T-related risk that the enterprise is currently exposed to.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
