Which of the following should be the MAIN reason for an enterprise to implement an IT risk management framework?

Which of the following should be the MAIN reason for an enterprise to implement an IT risk management framework?
A . The need to enable IT risk-aware decisions by executives
B . The results of an external audit report concerning IT risk management processes.
C . The need to address market regulations and internal compliance in IT risk
D . The ability to benchmark IT risk policies against major competitors

View Answer

Answer: A