nerdexam
Isaca

CRISC · Question #566

Which of the following is the GREATEST impact of implementing a risk mitigation strategy?

The correct answer is B. Reduction of residual risk. The greatest impact of implementing a risk mitigation strategy is the reduction of residual risk, which is the amount of risk remaining after controls and countermeasures have been applied.

Submitted by ashley.k· Apr 18, 2026Risk Response and Reporting

Question

Which of the following is the GREATEST impact of implementing a risk mitigation strategy?

Options

  • AImproved alignment with business goals.
  • BReduction of residual risk.
  • CIncreased costs due to control implementation.
  • DDecreased overall risk appetite.

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    90% (46)
  • C
    6% (3)
  • D
    2% (1)

Why each option

The greatest impact of implementing a risk mitigation strategy is the reduction of residual risk, which is the amount of risk remaining after controls and countermeasures have been applied.

AImproved alignment with business goals.

Improved alignment with business goals is an *indirect* benefit of effective risk management, but not the direct and primary *impact* of a specific mitigation strategy.

BReduction of residual risk.Correct

Risk mitigation strategies involve implementing controls and countermeasures to lessen the likelihood or impact of identified risks. The primary objective and direct outcome of successfully applying these strategies is to reduce the initial inherent risk down to an acceptable level of residual risk, which is the risk that remains even after mitigation efforts.

CIncreased costs due to control implementation.

Increased costs due to control implementation are an *effect* or consequence of mitigation, often a trade-off, but not the *greatest impact* in terms of achieving the risk management objective itself.

DDecreased overall risk appetite.

Decreased overall risk appetite is a *strategic decision* made by management, not a direct impact of implementing a *mitigation strategy*.

Concept tested: Impact of risk mitigation

Source: https://learn.microsoft.com/en-us/compliance/regulatory/risk-assessment-template

Topics

#Risk mitigation#Residual risk#Risk response#Control implementation

Community Discussion

No community discussion yet for this question.

Full CRISC Practice