Question 28
Main Page
During a strategy review, executives ask about risk appetite. What should you communicate?
A. The list of all accepted incidents in the last year
B. The regulatory controls adopted by IT
C. The broad level of risk the business is willing to pursue
D. The security awareness completion rate
Answer: C. The broad level of risk the business is willing to pursue
Risk appetite defines strategic tolerance for risk and is foundational for setting acceptable risk thresholds.