Before an IT strategy committee can approve an IT risk assessment framework, which of the following is MOST important to have established?

Before an IT strategy committee can approve an IT risk assessment framework, which of the following is MOST important to have established?
A . An enterprise risk mitigation strategy
B . Leading and lagging risk indicators
C . IT performance metrics and standards
D . Enterprise definitions for risk impact and probability

View Answer

Answer: D