Certified in Risk and Information Systems Control (CRISC) — Question 728

The MOST important characteristic of an organization's policies is to reflect the organization's:

Answer options

• A. risk appetite
• B. capabilities
• C. asset value
• D. risk assessment methodology

Correct answer: A

Explanation

The correct answer is A, as an organization's policies should align with its risk appetite to ensure that they reflect the level of risk the organization is willing to accept. Options B, C, and D, while important, do not capture the overarching principle that guides the formation of effective policies.