Certified in Risk and Information Systems Control (CRISC) — Question 1367

Which of the following is the MOST important reason to communicate control effectiveness to senior management?

Answer options

• A. To ensure management understands the current risk status
• B. To demonstrate alignment with industry best practices
• C. To align risk management with strategic objectives
• D. To assure management that control ownership is assigned

Correct answer: A

Explanation

The correct answer, A, highlights the necessity for management to be informed about the current risk status, which is crucial for making informed decisions. While options B, C, and D are important, they do not directly address the immediate need for management to grasp the existing risk landscape, which is essential for effective governance.