risk management policy statement

Select one:

a. all of the above.

b. should permit the risk manager some latitude.

c. should be a product of the board of directors with advice from the risk manager.

d. provides a framework within which the risk manager may make decisions.