Certified in Risk and Information Systems Control (CRISC) — Question 174

Which of the following is the MOST important factor affecting risk management in an organization?

Answer options

• A. The risk manager's expertise
• B. Regulatory requirements
• C. Board of director's expertise
• D. The organization's culture

Correct answer: D

Explanation

The organization's culture is the most critical factor because it shapes how risks are perceived and addressed at all levels. While the expertise of the risk manager, regulatory requirements, and the board's knowledge are important, they are less impactful if the culture does not prioritize effective risk management.