Which of the following is NOT part of the five steps of an organizational risk management plan?

The correct answer is the option that identifies a term that does not align with the established steps typically included in an organizational risk management plan. In risk management, the five steps generally encompass risk identification, risk assessment, risk evaluation, risk-control techniques, and risk-management monitoring.

Risk evaluation involves assessing potential risks and determining their significance, while risk-control techniques focus on implementing methods to mitigate identified risks. Risk-management monitoring ensures ongoing evaluation of risk management practices to adapt and respond to changes and emerging risks effectively.

In contrast, "risk elimination" can be misleading because complete elimination of all risks is often impractical; organizations typically aim to reduce or control risks rather than entirely remove them. This makes it an incorrect term in the context of a structured risk management process, as it suggests an unrealistic approach to dealing with risks.