crisc video for a risk practitioner has observed that risk owners have approved a high number of exceptions to the information security policy. Which of the
A risk practitioner has observed that risk owners have approved a high number of exceptions to the information security policy. Which of the following should be the risk practitioner's GREATEST concern?