CISA Certified Information Systems Auditor – Question2275 - CISA Certified Information Systems Auditor

What type of approach to the development of organizational policies is often driven by risk assessment?

A. Bottom-up
B. Top-down
C. Comprehensive
D. Integrated

Correct Answer: B

Explanation:

Explanation:
A bottom-up approach to the development of organizational policies is often driven by risk assessment.