What is the purpose of an IRM policy?
A.
It outlines the infrastructure for a company�s risk management processes and procedures.
B.
It provides direction for how the IRM team works with government agencies.
C.
It is the necessary key to be able to properly detect administrative, physical, and technical threats.
D.
It replaces a company�s security policy, because it is more expansive and wide reaching.
Explanation:
An IRM outlines the infrastructure for a companys risk management
processes and procedures.
From Harris:
“Information risk management (IRM) is the *process* of identifying, assessing, and reducing risk to an acceptable level and implementing the right mechanisms to maintain that level of risk.”