CISA Certified Information Systems Auditor – Question2634

Which of the following BEST indicates the effectiveness of an organization’s risk management program?

A.
Control risk is minimized.
B. Inherent risk is eliminated.
C. Residual risk is minimized.
D. Overall risk is quantified.

Correct Answer: C