Which of the following observations would be the GREATEST concern to a risk practitioner evaluating an organization's risk management practices?
Senior management has approved numerous requests for risk acceptance.
Business leaders provide final approval for information security policies.
Several risk scenarios have action plans spanning multiple years.
Senior management does not set risk tolerance.
Submit