Certified in Risk and Information Systems Control (CRISC) — Question 1154

Which of the following would be MOST helpful when determining the resources needed to mitigate risk identified as a result of a risk assessment?

Answer options

• A. Cost-benefit analysis
• B. Root cause analysis
• C. Risk analysis
• D. Business impact analysis (BIA)

Correct answer: A

Explanation

A cost-benefit analysis is the most effective tool for evaluating the resources necessary to mitigate identified risks, as it helps weigh the costs against the benefits of implementing risk mitigation strategies. In contrast, root cause analysis focuses on identifying the underlying causes of issues, risk analysis assesses the likelihood and impact of risks, and business impact analysis (BIA) evaluates the effects of disruptions, but none directly measure resource allocation for risk mitigation.