CRISC · Question #481
Which of the following BEST enables the integration of IT risk management across an organization?
The correct answer is A. Enterprise risk management (ERM) framework. An Enterprise Risk Management (ERM) framework is the most effective approach for integrating IT risk management consistently across all organizational functions.
Question
Which of the following BEST enables the integration of IT risk management across an organization?
Options
- AEnterprise risk management (ERM) framework
- BEnterprise-wide risk awareness training
- CRobust risk reporting practices
- DRisk management policies
How the community answered
(53 responses)- A91% (48)
- B6% (3)
- C2% (1)
- D2% (1)
Why each option
An Enterprise Risk Management (ERM) framework is the most effective approach for integrating IT risk management consistently across all organizational functions.
An Enterprise Risk Management (ERM) framework provides a structured and comprehensive approach to identify, assess, mitigate, and monitor risks across all business units, including IT, ensuring a unified risk posture. It standardizes risk processes, allowing for consistent integration of IT risks into the broader organizational risk landscape.
Enterprise-wide risk awareness training is crucial for educating staff but does not, by itself, provide the overarching structure for integration.
Robust risk reporting practices are outputs of a good risk management system but do not define the integration mechanism itself.
Risk management policies establish rules and guidelines but lack the comprehensive, integrated structure that an ERM framework provides.
Concept tested: Enterprise risk management integration
Source: https://www.iso.org/standard/65552.html
Topics
Community Discussion
No community discussion yet for this question.