Commitment and support from top management
The surveys show that respondents identified commitment and support from top management as the most important. Top-level management responds to business processes and manages risk. Most of the organizations believe that it is the responsibility of the Board of Directors or Committee and Executive Management team to establish risk management, while other organizations believe it is the responsibility of the Chief Executive Officer. Top management decides the objectives and strategies for organizational risk management activities, mission and overall objectives