CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ180

Risk Optimization

Which of the following would be of MOST concern in relation to the effectiveness of risk management processes?

  • A Risk management requirements are not included in performance reviews.
  • B Key risk indicators (KRIs) are not established.
  • C There is no framework to ensure effective reporting of risk events.
  • D The plans and procedures are not updated on an annual basis.
Explanation

An effective risk-management process requires a reliable framework for reporting and escalating risk events. Without it, risk events can go unidentified or uncommunicated, preventing timely assessment, response, governance oversight, and improvements to risk treatment.

Community Discussion

No comments yet. Be the first to start the discussion!