Which documentation would best support evidence of a governance committee's risk oversight?

• A. Annual budget only
• B. Personal notes of the chair
• C. Marketing plan
• D. Meeting minutes, risk reports, escalation paths, and action items

Answer: (D)

Evidence of governance risk oversight comes from formal, auditable documentation that records discussions, decisions, and follow-up actions. The best set of documents to demonstrate this oversight includes meeting minutes, risk reports, escalation paths, and action items. Meeting minutes show what was discussed, who attended, and what decisions the committee made. Risk reports outline identified risks, assessments, and proposed mitigations. Escalation paths illustrate how issues are raised to higher authorities when needed. Action items assign responsibilities and due dates, ensuring accountability and progress. Together, these records provide a traceable trail that the committee is actively monitoring risk rather than merely planning or talking about it. Annual budget alone doesn’t demonstrate risk oversight, personal notes of the chair are informal and not audit-ready, and a marketing plan is unrelated to governance risk oversight.