Certified in Risk and Information Systems Control (CRISC) — Question 614

Which of the following has the GREATEST influence on an organization’s risk appetite?

Answer options

• A. Business objectives and strategies
• B. Internal and external risk factors
• C. Threats and vulnerabilities
• D. Management culture and behavior

Correct answer: D

Explanation

Management culture and behavior play a crucial role in shaping an organization's risk appetite as they influence decision-making and risk assessment. While business objectives, risk factors, and threats are important, they are often guided by the attitudes and values of management, making option D the most influential.