Which of the following BEST indicates the effectiveness of an organization’s risk management program?

A. Control risk is minimized.
B. Inherent risk is eliminated.
C. Residual risk is minimized.
D. Overall risk is quantified.