nerdexam
Isaca

CRISC · Question #68

Which of the following is MOST helpful in providing an overview of an organization's risk management program?

The correct answer is C. Risk management framework. A risk management framework is most helpful in providing a comprehensive overview of an organization's entire risk management program, outlining its structure, processes, and policies.

Submitted by ngozi_ng· Apr 18, 2026Governance

Question

Which of the following is MOST helpful in providing an overview of an organization's risk management program?

Options

  • ARisk management treatment plan
  • BRisk assessment results
  • CRisk management framework
  • DRisk register

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    5% (2)
  • C
    89% (33)
  • D
    3% (1)

Why each option

A risk management framework is most helpful in providing a comprehensive overview of an organization's entire risk management program, outlining its structure, processes, and policies.

ARisk management treatment plan

A risk management treatment plan details specific actions for specific risks, but it doesn't provide a comprehensive overview of the entire program's structure or methodology.

BRisk assessment results

Risk assessment results show specific findings at a point in time, which are inputs to the program, but they don't describe the program itself.

CRisk management frameworkCorrect

A risk management framework defines the structure, components, processes, and guiding principles for how an organization identifies, assesses, responds to, and monitors risk. It provides the overarching blueprint and context for the entire program, offering a high-level overview of its design and operationalization.

DRisk register

A risk register is a record of identified risks, their status, and responses; it's a tool within the program, not an overview of the program's entire structure or methodology.

Concept tested: Risk management program overview

Topics

#Risk Management Program#Risk Management Framework#Program Overview#Risk Governance

Community Discussion

No community discussion yet for this question.

Full CRISC Practice