Which of the following is the STRONGEST indication of a mature risk management program?

The correct answer is A. Risk assessment results are used for informed decision making. The hallmark of a mature risk management program is that identified risks and their assessments actively inform strategic and operational decisions. This demonstrates that risk management is embedded in decision-making processes, rather than existing as a standalone or procedural

Submitted by kwame.gh· Apr 18, 2026Governance and Management of IT

Question

Options

ARisk assessment results are used for informed decision making
BAll attributes of risk are evaluated by the risk owner
CA metrics dashboard has been approved by senior management
DThe risk register is regularly updated by risk practitioners

How the community answered

(20 responses)

A
60% (12)
B
10% (2)
C
5% (1)
D
25% (5)

Explanation

The hallmark of a mature risk management program is that identified risks and their assessments actively inform strategic and operational decisions. This demonstrates that risk management is embedded in decision-making processes, rather than existing as a standalone or procedural

Topics

#Risk Management Maturity#Risk Assessment#Decision Making#IT Governance

Community Discussion

No community discussion yet for this question.

Full CISA Practice