IsacaIsaca
CRISC · Question #628
CRISC Question #628: Real Exam Question with Answer & Explanation
Sign in or unlock CRISC to reveal the answer and full explanation for question #628. The question stem and answer options stay visible for context.
Submitted by obi.ng· Apr 18, 2026Risk Response and Reporting
Question
Senior management has requested a risk practitioner's guidance on whether a new technical control requested by a business unit is worth the investment. Which of the following should be the MOST important consideration before providing input?
Options
- AThe cost of the control relative to the value of risk mitigation
- BThe effectiveness of the control at reducing residual risk levels
- CThe likelihood of a successful attack based on current risk
- Dassessments
- EThe availabilitv of budgeted funds for risk mitigationMitination
Unlock CRISC to see the answer
You've previewed enough free CRISC questions. Unlock CRISC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Control effectiveness#Risk mitigation#Residual risk#Control investment