IIA-CIA-Part1 Exam Question 96

Which of the following describes the primary objective when implementing a risk management framework?