Which of the following should NOT be a concern of Risk Management?

Ensuring the organization can continue to operate after a major disruption is a core concern of Risk Management, specifically through Business Continuity Planning which is risk-driven.

Workplace health and safety is a recognized domain of organizational risk management, as harm to employees or customers represents a direct operational and reputational risk.

Protecting organizational assets such as information, facilities, and buildings is a fundamental objective of Risk Management, aligned with information security and physical security risk practices.

Change Management, not Risk Management, is responsible for evaluating and approving change requests - including assessing associated risks. Risk Management identifies, assesses, and recommends responses to risks at an organizational level but does not directly control the change approval workflow or mandate that only changes with fully mitigated risks are approved.