Which approach ensures that employees provide risk-related information upward, while only issues requiring higher-level intervention...

The correct answer isA. Middle-out communication. ISO 31000 highlights the importance ofeffective communication flowsthat support timely escalation while avoiding unnecessary overload at senior management levels.

Middle-out communication combines bottom-up and top-down elements. Employees report risk-related information upward through their immediate supervisors or middle management. Middle managers thenfilter, assess, and consolidatethis information, escalating only those issues that require higher-level intervention to top management.

Top-down communication focuses on directives flowing from senior leadership to employees and does not address upward reporting. Bottom-up communication involves direct escalation from employees to top management, which can overwhelm leadership and bypass appropriate governance structures. Lateral communication refers to communication between peers and does not address escalation.

From a PECB ISO 31000 Lead Risk Manager perspective, middle-out communication supports effective governance by ensuring proportional escalation, clarity of accountability, and efficient decision-making. Therefore, the correct answer isMiddle-out communication.