Before an IT strategy committee can approve an IT risk assessment framework, which of the following is MOST important to have established?

exams CGEIT V1 CGEIT exam 0 Comments

Before an IT strategy committee can approve an IT risk assessment framework, which of the following is MOST important to have established?
A . An enterprise risk mitigation strategy
B . Leading and lagging risk indicators
C . IT performance metrics and standards
D . Enterprise definitions for risk impact and probability

Answer: D