Which risk category is defined as the possibility that factors arising from operations, environment, or strategic decisions may negatively affect objectives, profitability, and long-term success?

Which risk category is defined as the possibility that factors arising from operations, environment, or strategic decisions may negatively affect objectives, profitability, and long-term success?

• A. Reputational Risk
• B. Strategic Risk
• C. Operational Risk
• D. Business Risk

Answer: (D)

Business risk covers threats to achieving objectives across the whole enterprise, including factors from operations, the external environment, and strategic choices that can hurt profitability and long-term success. The description points to risks arising from how activities are run, how the environment may affect the business, and decisions about strategy, all of which could undermine objectives and future viability. That breadth—internal operations, external conditions, and strategic decisions—defines the risk category that looks at the overall ability of the business to deliver on its goals. Reputational risk is about image and trust, operational risk is about failures in processes, people, or systems, and strategic risk is about the viability of the chosen strategy itself; none of these capture the full scope described as well as business risk.

Business risk covers threats to achieving objectives across the whole enterprise, including factors from operations, the external environment, and strategic choices that can hurt profitability and long-term success. The description points to risks arising from how activities are run, how the environment may affect the business, and decisions about strategy, all of which could undermine objectives and future viability. That breadth—internal operations, external conditions, and strategic decisions—defines the risk category that looks at the overall ability of the business to deliver on its goals. Reputational risk is about image and trust, operational risk is about failures in processes, people, or systems, and strategic risk is about the viability of the chosen strategy itself; none of these capture the full scope described as well as business risk.