Câu 433: Isaca Certified in Risk and Information Systems Control

Which of the following is NOT true for risk governance?

1. A. Risk governance is based on the principles of cooperation, participation, mitigation and sustainability, and is adopted to achieve more effective risk management.
2. B. Risk governance requires reporting once a year. — đáp án hiện tại
3. C. Risk governance seeks to reduce risk exposure and vulnerability by filling gaps in risk policy.
4. D. Risk governance is a systemic approach to decision making processes associated to natural and technological risks.