CRISC Certified in Risk and Information Systems Control – Question687

When reporting risk assessment results to senior management, which of the following is MOST important to include to enable risk-based decision making?

A.
A list of assets exposed to the highest risk
B. Potential losses compared to treatment cost
C. Recent audit and self-assessment results
D. Risk action plans and associated owners

Correct Answer: B