Which use-case for SLAs in this context is valid?

• A. Risk Issues
• B. Risk
• C. Risk Statement
• D. Risk Framework

Answer: (B)

SLAs in this context are about enforcing time-bound actions within the risk management process. The strongest use-case is attaching SLAs to the risk record itself, so you can track and require timely activities across the risk lifecycle—identification, assessment, ownership assignment, remediation, and closure. This creates accountability and ensures remediation steps happen within defined timeframes, with escalation if deadlines are missed.

Risk issues can have urgency, but the primary aim of SLAs here is to drive progress on the risk as a whole, not just on individual remediation items. Risk statements and risk frameworks are governance constructs rather than work items with deadlines, so they aren’t the focal point for SLA enforcement.