What is the process of integrating risk assessments at a corporate level to obtain a complete view of the enterprise's overall risk?

• A. Risk aggregation
• B. Risk analysis
• C. Risk map
• D. Risk owner

Answer: (A)

Risk aggregation involves combining risk information from across the organization to create a single, enterprise-wide view of risk exposure. This approach recognizes that risks from different domains—cyber, operations, finance, third-party relationships, and more—can interact and influence the overall risk posture. By standardizing risk taxonomies, scoring, and data collection, and by maintaining governance for data quality and timely updates, you can consolidate risk data into a dashboard or register that supports board and executive decision-making, prioritization, and risk response aligned with the organization's risk appetite.

While risk analysis, risk maps, and a risk owner are important concepts, they focus on identifying/assessing individual risks, visualizing them, or assigning responsibility. They don’t by themselves provide the integrated, enterprise-wide view that aggregation delivers.