Certified in Risk and Information Systems Control (CRISC) — Question 1274

Which of the following is the MOST important course of action to foster an ethical, risk-aware culture?

Answer options

• A. Establish an enterprise-wide ethics training and awareness program.
• B. Ensure the alignment of the organization's policies and standards to the defined risk appetite.
• C. Implement a fraud detection and prevention framework.
• D. Perform a comprehensive review of all applicable legislative frameworks and requirements.

Correct answer: A

Explanation

Establishing an enterprise-wide ethics training and awareness program is crucial as it directly engages all employees in understanding and prioritizing ethical behavior and risk awareness. While aligning policies to risk appetite, implementing fraud detection, and reviewing legislation are important, they are secondary to instilling a foundational ethical mindset in the workforce.