CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following should serve as the PRIMARY driver when prioritizing risk responses?

A Residual risk
B Inherent risk
C Mitigation cost
D Risk appetite

Explanation

Risk appetite defines the amount and type of risk an organization is willing to accept. It therefore guides which risks require treatment and the relative priority of response actions.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ969

Community Discussion