Applying ISO 31000, which of the following is part of the external context for risk management?

exams IIA-CIA-Part1 V1 IIA-CIA-Part1 exam 0 Comments

Applying ISO 31000, which of the following is part of the external context for risk management?
A . Risk treatment method based on risk evaluation.
B. Organizational culture, objectives, and processes.
C. The regulatory and competitive environment
D. The method of determining the risk level.

Answer: C