December 11, 2021 by Admin

Which of the following should be the PRIMARY governance objective for selecting key risk indicators (KRIs) related to legal and regulatory compliance?

• Demonstrating sound risk management practices
• Ensuring the effectiveness of IT compliance controls
• Identifying the risk of noncompliance
• Measuring IT alignment with enterprise risk management (ERM)