Certified in Risk and Information Systems Control (CRISC) — Question 389

Which of the following MOST effectively enables senior management to communicate risk appetite?

Answer options

• A. Budget and resource allocation
• B. Risk awareness training
• C. Policies and procedures
• D. Risk heat map

Correct answer: C

Explanation

The correct answer is C, as policies and procedures outline the organization's stance and guidelines regarding risk, making it easier for senior management to communicate their risk appetite. While options A, B, and D play roles in risk management, they do not serve as the primary means for articulating risk appetite as effectively as policies and procedures do.