CRISC - Risk Assessment - Section 2.1
Develop and evaluate IT risk scenarios from risk events, contributing conditions and loss consequences.
Develop IT risk scenarios by pairing threat sources with vulnerabilities and tracing the resulting loss consequences to the organisation. Evaluate each scenario's plausibility so that assessment effort is directed at those with material business impact.
Risk scenariosRisk eventsThreat-vulnerability pairingLoss consequence
More in this domain
Back to all Risk Assessment objectives, or the CRISC cert hub.
Examworthy is not affiliated with or endorsed by ISACA. Original, blueprint-aligned practice material only.