Which of the following is an indicator that the organization s risk management process is effective?

Question

Options

• AThe organization s risk appetite mission, and objectives are dearly outlined.
• BThe organization s risk management practices are assessed as mature.
• CThe organization has adopted risk management frameworks and global models.
• DThe organization s significant risks are identified and adequately assessed

• A
  3% (1)
• B
  76% (22)
• C
  7% (2)
• D
  14% (4)

Explanation

Maturity of risk management practices is the strongest indicator of effectiveness because maturity assessments directly measure whether processes are actually working as intended - they evaluate consistency, repeatability, and ongoing improvement over time.

Why the distractors fall short:

• A - Clearly outlining risk appetite and objectives is a prerequisite (input), not evidence the process is working effectively.
• C - Adopting frameworks and global models is a starting point, not proof of effectiveness; an organization can adopt a framework and implement it poorly.
• D - Identifying and assessing risks is a component of the process, not a measure of overall effectiveness - you could do this step well while the broader risk management program still fails.

Memory tip: Think of it this way - inputs (A, C) and individual steps (D) describe what you have, while maturity (B) describes how well it all works together. On exams, "effectiveness" questions almost always point to assessment/measurement answers, not setup or adoption answers.

No community discussion yet for this question.