CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ41

Governance

Which of the following would BEST help improve an organization’s risk culture?

  • A Allocating resources for risk remediation
  • B Maintaining a documented risk register
  • C Rewarding employees for reporting security incidents
  • D Establishing a risk awareness program
Explanation

A risk awareness program promotes organization-wide understanding of risk responsibilities and encourages consistent risk-conscious decisions and behaviors. This directly strengthens risk culture, whereas the other measures address more specific risk-management activities or reporting behavior.

Community Discussion

No comments yet. Be the first to start the discussion!