CRISC · Question #551
Which of the following factors will have the GREATEST impact on the implementation of a risk mitigation strategy for an organization?
The correct answer is B. Risk tolerance. An organization's risk tolerance level is the most significant factor influencing its risk mitigation strategy, as it defines the acceptable level of residual risk.
Question
Which of the following factors will have the GREATEST impact on the implementation of a risk mitigation strategy for an organization?
Options
- ACost-benefit analysis
- BRisk tolerance
- CKnown vulnerabilities
- DCyber insurance
How the community answered
(30 responses)- A3% (1)
- B80% (24)
- C3% (1)
- D13% (4)
Why each option
An organization's risk tolerance level is the most significant factor influencing its risk mitigation strategy, as it defines the acceptable level of residual risk.
A cost-benefit analysis helps evaluate specific mitigation options but does not set the overall organizational appetite for risk, which guides the entire strategy.
Risk tolerance defines the amount of risk an organization is willing to accept, directly dictating the scope, aggressiveness, and resource allocation for implementing any risk mitigation strategy.
Known vulnerabilities are specific risks to address, but they do not determine the organization's overarching approach to risk mitigation.
Cyber insurance is a risk transfer mechanism, which is a form of risk treatment, but it does not dictate the organization's overall strategy for mitigating risks.
Concept tested: Risk tolerance's impact on mitigation strategy
Source: https://csrc.nist.gov/publications/detail/sp/800-39/final
Topics
Community Discussion
No community discussion yet for this question.