According to International Organization for Standardization (ISO) 31000:2018, an effective and efficient risk management program contains all of the following principles EXCEPT:
A.
The program is structured and comprehensive.
B.
The program is based upon the best available information.
C.
The program is integrated into only high-risk organizational activities.
D.
The program is customized and proportionate to the organization's operations and objectives.
ISO 31000:2018 emphasizes that effective risk management must be integrated into all activities across the organization—not just high-risk ones.
“An effective and efficient risk management program... is integrated into all organizational activities, is structured and comprehensive, and is customized and proportionate to the organization’s operations and objectives.”
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit