CRISC · Question #566
Which of the following is the GREATEST impact of implementing a risk mitigation strategy?
The correct answer is B. Reduction of residual risk. The greatest impact of implementing a risk mitigation strategy is the reduction of residual risk, which is the amount of risk remaining after controls and countermeasures have been applied.
Question
Which of the following is the GREATEST impact of implementing a risk mitigation strategy?
Options
- AImproved alignment with business goals.
- BReduction of residual risk.
- CIncreased costs due to control implementation.
- DDecreased overall risk appetite.
How the community answered
(51 responses)- A2% (1)
- B90% (46)
- C6% (3)
- D2% (1)
Why each option
The greatest impact of implementing a risk mitigation strategy is the reduction of residual risk, which is the amount of risk remaining after controls and countermeasures have been applied.
Improved alignment with business goals is an *indirect* benefit of effective risk management, but not the direct and primary *impact* of a specific mitigation strategy.
Risk mitigation strategies involve implementing controls and countermeasures to lessen the likelihood or impact of identified risks. The primary objective and direct outcome of successfully applying these strategies is to reduce the initial inherent risk down to an acceptable level of residual risk, which is the risk that remains even after mitigation efforts.
Increased costs due to control implementation are an *effect* or consequence of mitigation, often a trade-off, but not the *greatest impact* in terms of achieving the risk management objective itself.
Decreased overall risk appetite is a *strategic decision* made by management, not a direct impact of implementing a *mitigation strategy*.
Concept tested: Impact of risk mitigation
Source: https://learn.microsoft.com/en-us/compliance/regulatory/risk-assessment-template
Topics
Community Discussion
No community discussion yet for this question.