CRISC Certified in Risk and Information Systems Control – Question825

Which of the following provides the BEST evidence that a selected risk treatment plan is effective?

A.
Evaluating the residual risk level.
B. Identifying key risk indicators.
C. Evaluating the return on investment.
D. Performing a cost-benefit analysis.

Correct Answer: B