CRISC Certified in Risk and Information Systems Control – Question658 Which of the following is MOST useful when communicating risk to management? A. Risk policy B. Risk map C. Maturity model D. Audit report Show Answer Hide Answer Correct Answer: B