CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ610

Risk Response and Reporting

You are the project manager for the GHT project and are conducting a cost-benefit analysis of a control. You find that the costs of particular controls exceed the benefits of mitigating a given risk. What is the BEST action to choose in this scenario?

  • A The enterprise may apply the appropriate control anyway.
  • B The enterprise should adopt corrective control.
  • C The enterprise may choose to accept the risk rather than incur the cost of mitigation.
  • D The enterprise should exploit the risk.
Explanation

Risk acceptance is appropriate when the cost of mitigating a risk exceeds the expected benefit of the control and the organization considers the remaining exposure acceptable.

Community Discussion

No comments yet. Be the first to start the discussion!