Certified in Risk and Information Systems Control (CRISC) — Question 426

Which of the following is the MOST important success factor when introducing risk management in an organization?

Answer options

• A. Establishing executive management support
• B. Implementing a risk register
• C. Assigning risk ownership
• D. Defining a risk mitigation strategy and plan

Correct answer: A

Explanation

Securing support from executive management is crucial because it ensures alignment of risk management with organizational goals and provides the necessary resources. While implementing a risk register, assigning risk ownership, and defining a risk mitigation strategy are important steps, they depend on the commitment and backing of executive management to be effective.