Kizspy | Question: 14
(Choose 1 answer)
What is applicable to both GRC and ERM among the following?
A. Defines an approach to reduce risk
B. Applies rigid framework to eliminate redundant controls, policies, and efforts
C. Passively enforces security policy
D. Seeks line of sight into root causes of risks