How should risk information be communicated to the board?

How should risk information be communicated to the board?

• A. Concise dashboards highlighting top risks, trends, KRIs, responsible owners, and actions.
• B. Detailed operational reports with every control detail.
• C. Only annual summaries without trends.
• D. Narratives without metrics.

Answer: (A)

Presenting risk information to the board should be a concise, decision-ready snapshot that highlights what matters most. A dashboard-style report that shows the top risks, their trends, the key risk indicators, who owns each risk, and the actions planned or taken gives directors a clear view of exposure, direction, and accountability. This format lets the board quickly assess risk against appetite, spot emerging issues, and track progress on mitigations and ownership without getting lost in operational detail. Detailed operational reports are too granular for board governance, annual summaries alone miss timely insight and trend information, and narratives without metrics don’t provide a measurable sense of magnitude or momentum.

Presenting risk information to the board should be a concise, decision-ready snapshot that highlights what matters most. A dashboard-style report that shows the top risks, their trends, the key risk indicators, who owns each risk, and the actions planned or taken gives directors a clear view of exposure, direction, and accountability. This format lets the board quickly assess risk against appetite, spot emerging issues, and track progress on mitigations and ownership without getting lost in operational detail. Detailed operational reports are too granular for board governance, annual summaries alone miss timely insight and trend information, and narratives without metrics don’t provide a measurable sense of magnitude or momentum.