CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ40

Risk Optimization

Approval of an enterprise risk management framework is the responsibility of the:

  • A chief information officer.
  • B chief risk officer.
  • C IT steering committee
  • D board of directors.
Explanation

The board of directors provides enterprise-level risk oversight and approves the organization’s risk management framework. Executive management implements and administers the framework within the board-approved governance structure.

Community Discussion

No comments yet. Be the first to start the discussion!