Certified in Risk and Information Systems Control (CRISC) — Question 252

Which of the following is the MOST important consideration when sharing risk management updates with executive management?

Answer options

• A. Using an aggregated view of organizational risk
• B. Relying on key risk indicator (KRI) data
• C. Ensuring relevance to organizational goals
• D. Including trend analysis of risk metrics

Correct answer: C

Explanation

The correct answer is C because updates must be relevant to the organization's goals to ensure that executive management can make informed decisions. While options A, B, and D provide useful data, they do not prioritize alignment with strategic objectives, which is crucial for effective communication with executives.