CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ271

Risk Optimization

A CEO of a large enterprise is worried that risk events are not routinely addressed by the C-suite unless they relate to emergency incidents. Which of the following is the BEST way for the CEO to ensure risk events receive sufficient time and attention?

  • A Instruct managers to take ownership for their department's identified risks.
  • B Issue performance objectives that target the elimination of enterprise risks.
  • C Include the discussion of key enterprise risk as an agenda item at board meetings.
  • D Require the development of a risk procedure on how to capture risks.
Explanation

Including key enterprise-risk discussion as an agenda item at board meetings establishes regular governance oversight and ensures that significant risk events receive formal, sustained senior-level attention.

Community Discussion

No comments yet. Be the first to start the discussion!