Certificate of Cloud Auditing Knowledge (CCAK) — Question 62

Which of the following is MOST relevant to determine whether an organization is a risk taker or is risk-averse?

Answer options

• A. Risk management methodology
• B. Risk culture
• C. Risk heat map
• D. Risk appetite

Correct answer: D

Explanation

The correct answer is D, as risk appetite directly reflects the level of risk an organization is willing to accept. Options A, B, and C are related to risk management practices but do not specifically indicate the organization's stance towards risk-taking.