Which of the following is the MOST important goal when analyzing controls to address a specific vulnerability?

The correct answer is D. To reduce the risk to an acceptable level. The primary goal when analyzing controls for a specific vulnerability is to reduce the associated risk to an acceptable level based on the organization's risk appetite. Security measures should be implemented in a way that effectively mitigates the risk while aligning with…

Submitted by diego_uy· Apr 18, 2026Information Security Risk Management

Question

Options

ATo minimize the impact of breaches
BTo minimize time and cost of mitigation
CTo gain support from risk and control owners
DTo reduce the risk to an acceptable level

How the community answered

(32 responses)

A
3% (1)
B
9% (3)
C
6% (2)
D
81% (26)

Explanation

The primary goal when analyzing controls for a specific vulnerability is to reduce the associated risk to an acceptable level based on the organization's risk appetite. Security measures should be implemented in a way that effectively mitigates the risk while aligning with business objectives. While minimizing breach impact, cost, and gaining stakeholder support are important, they are secondary to ensuring that the risk is adequately addressed.

Topics

#Risk Management Goal#Control Analysis#Acceptable Risk#Risk Treatment

Community Discussion

No community discussion yet for this question.

Full CISM Practice