Explanation/Reference:
Explanation:
Risk communication is the process of exchanging information and views about risks among stakeholders, such as groups, individuals, and institutions. Risk communication is mostly concerned with the nature of risk or expressing concerns, views, or reactions to risk managers or institutional bodies for risk management. The key plan to consider and communicate risk is to categorize and impose priorities, and acquire suitable measures to reduce risks. It is important throughout any crisis to put across multifaceted information in a simple and clear manner.
Risk communication helps in switching or allocating the information concerning risk among the decision- maker and the stakeholders.
Risk communication can be explained more clearly with the help of the following definitions:
It defines the issue of what a group does, not just what it says.

It must take into account the valuable element in user's perceptions of risk.

It will be more valuable if it is thought of as conversation, not instruction.

Risk communication is a fundamental and continuing element of the risk analysis exercise, and the involvement of the stakeholder group is from the beginning. It makes the stakeholders conscious of the process at each phase of the risk assessment. It helps to guarantee that the restrictions, outcomes, consequence, logic, and risk assessment are undoubtedly understood by all the stakeholders.
Incorrect Answers:
B: It helps in allocating the information concerning risk not only among the decision-makers but also stakeholders.

Section: Volume B
Explanation:
The completed feasibility study results should include a cost/benefit analysis report that:
* Provides the results of criteria analyzed (e.g., costs, benefits, risk, resources required and organizational impact)
* Recommends one of the alternatives and a course of action
Incorrect Answers:
B, C: Project management plan and risk response plan are the results of plan project management and plan risk response, respectively. They are not the result of feasibility study.

When an organization restructures its business processes, the first step in revising the BCP is to identify new potentially disruptive scenarios that may affect the continuity of the critical functions and processes. This can be done by conducting a risk assessment or a business impact analysis (BIA) to determine the likelihood and impact of various threats and vulnerabilities on the organization's objectives and operations. By identifying new potentially disruptive scenarios, the organization can then update its recovery strategies, objectives, and plans accordingly.
References:
*ISACA, Risk IT Framework, 2nd Edition, 2019, p. 761
*ISACA, IT Business Continuity/Disaster Recovery Audit Program, 2021, p. 52