What term best describes a tool used by personnel at all levels to identify, assess, and manage risks?

• A. Risk assessment checklist
• B. Incident reporting system
• C. Security briefing template
• D. Decision-making tool

Answer: (D)

A framework for risk management must help people at all levels identify, analyze, and act on risk. A decision-making tool is the best fit because it guides how to evaluate options, weigh potential consequences, and choose actions that reduce risk. It supports involvement from frontline staff to leadership, enabling proactive mitigation rather than just documenting risks or sharing information.

Think of risk assessment checklists as useful for making sure nothing is missed during identification, but they don’t inherently drive ongoing management decisions. An incident reporting system collects details after events have occurred, which is reactive rather than the forward-looking decision process. A security briefing template communicates important information but isn’t itself a method for evaluating options and deciding on risk-reducing actions.