nerdexam
Isaca

CRISC · Question #327

Which of the following is MOST important for managing ethical risk?

The correct answer is D. Establishing a code of conduct for employee behavior. Establishing a clear code of conduct is paramount for managing ethical risk as it provides foundational guidelines for employee behavior and decision-making within the organization.

Submitted by salim_om· Apr 18, 2026Governance

Question

Which of the following is MOST important for managing ethical risk?

Options

  • AInvolving senior management in resolving ethical disputes
  • BDeveloping metrics to trend reported ethics violations
  • CIdentifying the ethical concerns of each stakeholder
  • DEstablishing a code of conduct for employee behavior

How the community answered

(35 responses)
  • A
    9% (3)
  • B
    6% (2)
  • C
    3% (1)
  • D
    83% (29)

Why each option

Establishing a clear code of conduct is paramount for managing ethical risk as it provides foundational guidelines for employee behavior and decision-making within the organization.

AInvolving senior management in resolving ethical disputes

Involving senior management in resolving ethical disputes is important for escalation and resolution but is a reactive measure, not the most important proactive step in managing ethical risk.

BDeveloping metrics to trend reported ethics violations

Developing metrics to trend reported ethics violations is a useful tool for monitoring and improving ethical programs, but it follows the establishment of behavioral guidelines.

CIdentifying the ethical concerns of each stakeholder

Identifying the ethical concerns of each stakeholder is part of a comprehensive ethics program, but without a guiding code, these concerns lack a framework for consistent addressal.

DEstablishing a code of conduct for employee behaviorCorrect

A formal code of conduct clearly defines the expected ethical behavior, values, and principles for all employees. It serves as the fundamental framework for fostering an ethical culture, guiding decisions, and preventing ethical breaches, thus being the most important proactive step in managing ethical risk.

Concept tested: Ethical risk management foundation

Source: https://www.ethics.org/what-we-do/research/a-simple-code-of-conduct/

Topics

#Ethical Risk Management#Code of Conduct#Organizational Ethics#Risk Controls

Community Discussion

No community discussion yet for this question.

Full CRISC Practice