Question

A CRISC practitioner notices that the enterprise risk report is produced quarterly, but a critical business unit operating in a fast-moving digital-payments market experiences rapid shifts in fraud patterns that materially change its risk profile within weeks. Senior management from that unit complains that by the time they receive the report, the data is stale and no longer supports timely decisions. What is the BEST course of action for the risk practitioner?

Accepted Answer

Adjust the reporting cadence for that business unit to align with the velocity of its risk changes and stakeholder decision needs

Answer

Continue the quarterly cycle to maintain reporting consistency across all business units and avoid setting a precedent

Answer

Escalate the complaint to internal audit so they can assess whether the reporting process is compliant with policy

Answer

Add more historical detail and trend charts to the existing quarterly report so managers have richer context