QuestionQ40Verified/Risk Governance and ManagementCopy linkReport a problemAsk AstroTutorSave questionWhich of the following is MOST important when defining an organization’s risk scope?AUnderstanding the impacts of the risk environment to the organizationBDeveloping a top-down approach to risk managementCDeveloping requirements for risk reporting to executive managementShow AnswerAnswerExplanationAn organization’s risk scope must be grounded in an understanding of how its risk environment affects the organization. That understanding identifies the relevant internal and external sources of risk and their potential impact; management approach and reporting requirements are subsequent governance considerations.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion