The correct answer is C.

Having recently completed an IPO, DigitalSpace is likely to be scrutinized by banks and other lenders who are interested in knowing how their funds will be invested. The company will need to demonstrate a solid understanding of risk management to these stakeholders to maintain access to funding. This concern by lenders can be a significant driver of risk consciousness within the organization.

A is incorrect. While the risk management practices of direct competitors may be of interest to DigitalSpace, they are not a direct source of risk consciousness. The practices of competitors can influence industry norms, but risk consciousness typically emerges more directly from stakeholders such as lenders, management, and investors.

B is incorrect. While the personal risk tolerance of individual employees might influence their behavior at work, it's not typically a primary source of risk consciousness within an organization. Organizational risk consciousness tends to be driven more by institutional stakeholders and their requirements and expectations.

D is incorrect. While the coding practices followed in the software development process may introduce operational risk to the company, they are not a source of risk consciousness. Risk consciousness refers to the awareness and understanding of risk at an organizational level and is often driven by the concerns of stakeholders such as lenders, management, and investors.

Things to Remember

• There is a growing sense of risk consciousness within organizations, driven by increased scrutiny from banks, investors, and other stakeholders who require more transparency in asset placements and management.
• Investors are expected to possess more firsthand knowledge about their investment choices, influenced by several high-profile losses. This has led to a greater demand for asset managers to predict and explain potential performance in high-risk scenarios.
• The increased risk consciousness has resulted in the formation of independent risk management units (RMUs) in many organizations. These units monitor risk exposures of portfolios to ensure they align with risk budgets.
• The establishment of RMUs was largely influenced by a 1996 paper from the Working Group, advocating for the independence of these units as a core part of effective internal control environments.
• The Working Group's Third Standard mandates independent internal groups to perform various oversight functions including overseeing investment activity, limit and exception monitoring, stress and back tests, and ensuring managers conduct independent risk oversight.