CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following BEST demonstrates that risk management is embedded in the responsibilities of all employees?

A The number of incidents has decreased over time.
B Risk management practices are incorporated into business processes.
C Industry benchmarking is performed on an annual basis.
D Risk management practices are audited on an annual basis.

Explanation

Incorporating risk management practices into business processes makes risk identification, assessment, and response part of routine work across the organization, thereby assigning practical responsibility to employees. Reduced incidents, annual benchmarking, and annual audits do not by themselves establish that risk management is embedded in daily responsibilities.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ557

Community Discussion