Exam CGEIT topic 1 question 293 discussion

C. Promoting responsibility throughout the enterprise for managing IT risk. While all the options presented are relevant to IT risk management, promoting responsibility throughout the enterprise for managing IT risk is the primary motivation behind establishing an IT risk management framework. This involves ensuring that everyone in the organization understands their role in identifying, assessing, mitigating, and managing IT risks. It fosters a culture of risk awareness and accountability across all levels of the enterprise. By promoting responsibility for managing IT risk, organizations can effectively integrate risk management into their daily operations and decision-making processes, leading to a more resilient and secure IT environment. The other options mentioned are important aspects of IT risk management but are typically outcomes or components of a well-established risk management framework rather than the primary motivation.