A. Management of the organization is ultimately responsible for risk oversight.
B. A risk committee is useful for enforcing the firm’s risk governance principles.
C. Effective risk governance requires multiple levels of accountability and authority.
D. The point of risk governance is to minimize the amount of risk taken by the organization.
