Which of the following BEST reflects mature risk management in an enterprise?

A regularly updated risk register is a fundamental tool for risk management, but it represents documentation rather than the pervasive cultural integration of risk awareness.

Ongoing risk assessment is a key process within risk management, indicating continuous effort, but a mature culture extends beyond just assessment to actively embedding risk considerations in daily actions.

Ongoing investment in risk mitigation is important for addressing identified risks, but a truly mature state involves a culture where risk is considered before mitigation is even necessary, preventing issues where possible.

A responsive risk awareness culture signifies that risk management is not just a process or a checklist item, but an inherent part of the enterprise's operational fabric and decision-making at all levels. This cultural embedding ensures that risks are continuously identified, understood, and addressed proactively by everyone, rather than only by a dedicated risk team.