Exam CRISC topic 1 question 1155 discussion

Having to agree with A here. Everything I have ever been taught in audit is to look first to see if policies are applied consistently, or if they are created in a distributed manner.

Applying risk policies in a consistent manner across regions is likely to be the BEST approach to achieve this objective. Applying risk policies in a consistent manner across regions helps to ensure that all employees understand and follow the same risk management practices and procedures. This approach can help to promote a shared understanding of risk management principles and practices, and can help to minimize the potential for confusion or misunderstanding that can arise when different regions or business units use different approaches to managing risk. Centralizing the risk management function can also be an effective strategy for promoting a unified risk culture, as it can help to ensure that all employees have access to consistent risk management tools, resources, and expertise. However, this approach may be more challenging to implement in a multinational organization, as it may be difficult to establish a single risk management function that can effectively serve the needs of all regions and business units.