CRISC Certified in Risk and Information Systems Control – Question668

Which of the following would provide the BEST guidance when selecting an appropriate risk treatment plan?

A.
Return on investment
B. Risk mitigation budget
C. Cost-benefit analysis
D. Business impact analysis

Correct Answer: C