Which IT risk concept refers to an IT-related event that can impact operations and strategy?

• A. IT-related incident
• B. Inherent risk
• C. ROI
• D. Detection risk

Answer: (A)

An IT-related incident is a real event that disrupts IT services or data and can affect how the organization operates and plans. This covers outages, security breaches, data loss, or other disruptions that have immediate operational impact and can influence strategic decisions, such as shifting priorities to resilience or incident response capabilities.

Inherent risk describes the baseline exposure before controls are applied, not a specific event. ROI is a financial metric measuring return on investment, not a type of IT event. Detection risk is the chance that a control failure goes undetected, again not an event impacting operations. So the term that best matches a concrete IT event with potential operational and strategic consequences is IT-related incident.