Certified in Risk and Information Systems Control (CRISC) — Question 1199

Which of the following BEST indicates that risk management is embedded into the responsibilities of all employees?

Answer options

• A. The number of incidents has decreased over time.
• B. Risk management practices are incorporated into business processes.
• C. Industry benchmarking is performed on an annual basis.
• D. Risk management practices are audited on an annual basis.

Correct answer: B

Explanation

Option B is correct because it shows that risk management is a fundamental part of the organization's processes, indicating a comprehensive approach. The other options, while they may reflect positive outcomes or practices, do not necessarily demonstrate that all employees are actively engaged in risk management as part of their daily responsibilities.