Which three elements are central to risk management planning?

Which three elements are central to risk management planning?

• A. Planning, Mitigation, and Preparedness
• B. Preparedness, Mitigation, and Recovery
• C. Planning, Response, and Recovery
• D. Mitigation, Preparedness, and Recovery

Answer: (A)

Risk management planning hinges on establishing a proactive framework that identifies, reduces, and prepares for risks before they materialize. Planning provides the structured process: defining objectives, roles, timelines, and resources so everyone knows how risk decisions will be made. Mitigation then targets reducing the likelihood or impact of those risks—things like strengthening systems, updating controls, or redesigning processes to lower exposure. Preparedness focuses on being ready to act when a risk event occurs, through training, drills, communication plans, and ready-to-use resources so responses can be timely and effective. These three work together to shift risk management from reactive steps to a planned, proactive discipline. While response or recovery are important during and after events, they belong to the execution and post-event phases rather than the planning phase itself.

Risk management planning hinges on establishing a proactive framework that identifies, reduces, and prepares for risks before they materialize. Planning provides the structured process: defining objectives, roles, timelines, and resources so everyone knows how risk decisions will be made. Mitigation then targets reducing the likelihood or impact of those risks—things like strengthening systems, updating controls, or redesigning processes to lower exposure. Preparedness focuses on being ready to act when a risk event occurs, through training, drills, communication plans, and ready-to-use resources so responses can be timely and effective.

These three work together to shift risk management from reactive steps to a planned, proactive discipline. While response or recovery are important during and after events, they belong to the execution and post-event phases rather than the planning phase itself.