In an international, multi-division enterprise, a consistent risk management methodology ensures that risks are analyzed uniformly across divisions, enabling comparability and enterprise-wide prioritization. The CGEIT Review Manual 8th Edition emphasizes the importance of a standardized approach to risk management in complex organizations.

Extract from CGEIT Review Manual 8th Edition (Domain 3: Risk Optimization):"In multi-division or international enterprises, a consistent risk management methodology is critical to ensure that risks are assessed and prioritized uniformly across the organization. This enables aggregation of risks and alignment with enterprise-wide objectives." (Approximate reference: Domain 3, Section on Enterprise Risk Management)

Using a consistent risk management methodology (option D) ensures that all divisions apply the same criteria, processes, and tools, facilitating a cohesive risk profile and effective decision-making.

Why not the other options?

A. Risk management methodologies are aligned with local best practices: Local alignment may lead to inconsistencies across divisions, undermining enterprise-wide risk management.

B. IT senior managers perform the analysis: While senior managers may be involved, the methodology itself is more important than who performs the analysis.

C. Risk scenarios are compartmentalized by division: Compartmentalization may prevent a holistic view of enterprise risks, reducing effectiveness.