Which of the following would be of MOST concern regarding the effectiveness of risk management processes?

A. Risk management requirements are not included in performance reviews.

B. Key risk indicators (KRIs) are not established.

C. There is no framework to ensure effective reporting of risk events.

D. The plans and procedures are not updated on an annual basis.








 

Suggested Answer: C

Community Answer: C



This question is in CGEIT Certified in the Governance of Enterprise IT Exam
For getting Certified in the Governance of Enterprise IT (CGEIT) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.