CGEIT Certified in the Governance of Enterprise IT – Question220

Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)?

A.
Identifying possible future adverse impacts on the enterprise
B. Evaluating existing technology for risk monitoring capabilities
C. Establishing executive level buy-in of the risk program
D. Quantifying the productivity of the risk management team

Correct Answer: C