CISA · Question #555
Which of the following responses to risk associated with separation of duties would incur the LOWEST initial cost?
The correct answer is D. Risk acceptance. Risk acceptance incurs the lowest initial cost because it requires no investment in controls, insurance, or process changes-the organization simply acknowledges and documents the risk. Risk transference (e.g., insurance, outsourcing) requires premium or contract payments. Risk…
Question
Which of the following responses to risk associated with separation of duties would incur the LOWEST initial cost?
Options
- ARisk transference
- BRisk reduction
- CRisk mitigation
- DRisk acceptance
How the community answered
(27 responses)- B4% (1)
- C4% (1)
- D93% (25)
Explanation
Risk acceptance incurs the lowest initial cost because it requires no investment in controls, insurance, or process changes-the organization simply acknowledges and documents the risk. Risk transference (e.g., insurance, outsourcing) requires premium or contract payments. Risk reduction and risk mitigation both require implementing compensating controls (such as enhanced logging, supervisory reviews, or workflow redesigns), all of which carry direct costs. Accepting the risk is essentially a zero-cost decision, though it carries ongoing exposure if the risk materializes.
Topics
Community Discussion
No community discussion yet for this question.