A risk assessment program should be approved by management and communicated to all appropriate constituents.

• A. True
• B. False
• C. Not Sure
• D. Not Applicable

Answer: (A)

Approval by management and broad communication establish governance and accountability for risk assessment. When leadership formally approves the program, it gains legitimacy, aligns with strategic objectives, and secures the necessary resources and authority to operate consistently across the organization. Communicating the program to all appropriate constituents ensures people understand their roles, responsibilities, and the processes for identifying, evaluating, and mitigating risks, which is essential for effective execution. Without management approval, the program may lack funding or authority, and without wide communication, stakeholders may not follow the process or act on risk findings. So, this statement is true.