A(n)____ is a plan or course of action used by an organization to convey instructions from its senior-most management to those who make decisions,take actions,and perform other duties on behalf of the organization.
A)policy
B)assessment
C)asset
D)residual risk

Question

Quizplus · Accepted Answer

A policy is a set of guidelines or rules that an organization follows to achieve a specific goal. It is a plan or course of action that conveys instructions from senior management to those who make decisions, take actions, and perform other duties on behalf of the organization. Policies are designed to ensure consistency, reduce risk, and improve overall performance. Assessments, assets, and residual risk are all important components of an organization's overall risk management strategy, but they are not plans or courses of action used to convey instructions from senior management to those who make decisions and take actions.

A(n)____ Is a Plan or Course of Action Used by an Organization