According to the principles of ISO 31000, which of the following best describes the relationship between risk management and organizational processes?
-
A
Risk management should be a standalone function, separate from other organizational processes to ensure objectivity.
-
B
Risk management is an integral part of all organizational processes, including decision-making at all levels.
-
C
Risk management should only be applied to specific high-risk projects and functions rather than the entire organization.
-
D
Risk management processes are primarily the responsibility of the finance and legal departments.