Organizations can benefit by shifting the corporate culture from one that focuses on meeting IT compliance obligations to one that targets overall risk reduction. Visibility into the overall security of the organization plays an important role in establishing this new dialogue. Reducing enterprise risk and developing a common risk management language requires an organization to: therefore the answer should be C

Agree it is C.

going with C

The explanation of Anon530 is correct.

Answer A is correct. Standard risk mgmt process for complying with regulations. An ERM program can help increase awareness of business risks across an entire organization, instill confidence in strategic objectives, improve compliance with regulatory and internal compliance mandates, and enhance operational efficiency through more consistent applications of processes and controls.

Agree with all others, correct is C

agree with C

My choice was between C. To have a unified approach to risk management across the organization and D. To optimize risk management resources across the organization. Ultimately, I thought C was a better answer. A is definitely not the right answer. I did not like to "comply with regulations" Risk management may or may not comply with regulation.

Shouldn’t the answer be C. To have a unified approach to risk management across the organization. Would like to hear you views on this..