Certified in Risk and Information Systems Control (CRISC) — Question 1172

Which of the following is MOST important when creating a program to reduce ethical risk?

Answer options

• A. Obtaining senior management commitment
• B. Developing an organizational communication plan
• C. Conducting a gap analysis
• D. Defining strict policies

Correct answer: A

Explanation

Securing commitment from top management is crucial because it sets the tone for the entire organization and demonstrates the importance of ethical practices. While the other options contribute to the program's effectiveness, without senior management support, initiatives may lack the necessary resources and authority to be successful.