Isaca Certified in Risk and Information Systems Control CRISC Question # 207 Topic 21 Discussion
CRISC Exam Topic 21 Question 207 Discussion:
Question #: 207
Topic #: 21
When assessing the maturity level of an organization's risk management framework, which of the following should be of GREATEST concern to a risk practitioner?
A.
Reliance on qualitative analysis methods
B.
Lack of a governance, risk, and compliance (GRC) tool
Senior management involvement is foundational to an effective risk management framework. Lack of engagement signals inadequate oversight, strategic alignment, and resource commitment, impairing the program's success. This is supported by CRISC's focus on governance and leadership alignment to ensure enterprise risk management objectives are met.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit