CRISC Certified in Risk and Information Systems Control – Question662

Which of the following should be the HIGHEST priority when developing a risk response?

A.
The risk response is accounted for in the budget.
B. The risk response aligns with the organization’s risk appetite.
C. The risk response is based on a cost-benefit analysis.
D. The risk response addresses the risk with a holistic view.

Correct Answer: C