The cost of maintaining a control has grown to exceed the potential loss. Which of the following BEST describes this situation?

Insufficient risk tolerance would likely lead to *more* controls or higher-cost controls to reduce risk further, but the problem described is that the control *cost* is too high relative to the potential loss, not an issue with tolerance itself.

Optimized control management would imply a balance between control costs and benefits, which is contrary to a situation where costs exceed potential loss.

Effective risk management involves implementing controls with a positive cost-benefit ratio; a situation where costs exceed loss indicates a deficiency in risk management effectiveness or optimization.

An over-controlled environment exists when the financial investment and effort required to implement and maintain controls surpass the potential financial loss or impact of the risk they are designed to mitigate. This indicates an imbalance where resources are being inefficiently allocated, and controls are more costly than the problem they solve.