Exam CRISC topic 1 question 1470 discussion

it is D. it directly helps senior management understand the risk environment and provides them with clear recommendations on how to mitigate or manage identified risks

C. Create a risk program that includes a bottom-up approach. Creating a risk program that includes a bottom-up approach involves gathering information and insights from various levels and departments within the organization. This approach allows for a more comprehensive understanding of risks at different levels, ensuring that senior management receives a complete and detailed picture of the organization's risk environment. D involves just risk acceptance (limited perspective) Guidance is a passive approach. A risk practitioner must be proactive in their risk treatment solutions

D. Provide guidance to senior management on risk acceptance. Providing guidance to senior management on risk acceptance involves not only informing them about existing and potential risks but also advising on the implications of accepting, mitigating, or transferring these risks. This approach facilitates informed decision-making at the highest level of the organization. It ensures that senior management is aware of the risk landscape and understands the consequences of various risk treatment options. While recommending specific risk treatments, implementing control approaches, and creating risk programs are important elements of risk management, directly engaging senior management with guidance on risk acceptance ensures they are fully informed and involved in the risk management process.