Which of the following is MOST important for a risk practitioner to understand about an organization in order to create an effective risk
awareness program?
Policies and procedures
Structure and culture
Key risk indicators (KRIs) and thresholds
Known threats and vulnerabilities
Submit