Certified in Risk and Information Systems Control (CRISC) — Question 1021

Which of the following provides the BEST indication of risk management maturity?

Answer options

• A. Comprehensive risk and control assessment methodology
• B. Risk management policy alignment with corporate culture
• C. Business continuity insurance coverage
• D. Presence of a risk management framework

Correct answer: D

Explanation

The presence of a risk management framework is essential as it demonstrates an organization's structured approach to identifying, assessing, and managing risks, indicative of maturity in risk management. While the other options are important, they are not as comprehensive in reflecting the overall maturity level as a formal framework is.