To enable effective risk governance, it is MOST important for senior management to:

Ensure the IT governance framework is up to date.

Communicate the risk management strategy across the organization.

Gain a clear understanding of business risk and related ownership.

Ensure security policies and procedures are documented.