Isaca
CGEIT · Question #301
An IT governance committee is defining a risk management policy for a portfolio of IT-enabled investments. Which of the following should be the PRIMARY consideration when developing the policy?
Sign in or unlock CGEIT to reveal the answer and full explanation for question #301. The question stem and answer options stay visible for context.
Submitted by andreas_gr· Apr 18, 2026Governance of Enterprise IT
Question
An IT governance committee is defining a risk management policy for a portfolio of IT-enabled investments. Which of the following should be the PRIMARY consideration when developing the policy?
Options
- ARisk management framework
- BPossible investment failures
- CValue obtained with minimum risk
- DRisk appetite of the enterprise
Unlock CGEIT to see the answer
You've previewed enough free CGEIT questions. Unlock CGEIT for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk Management Policy#Risk Appetite#IT Governance#Strategic Risk