Certified in Risk and Information Systems Control (CRISC) — Question 1309

Which of the following will have the GREATEST influence on the residual risk level in an organization?

Answer options

• A. The investment portfolio
• B. IT department's capability
• C. The availability of resources
• D. The residual risk level in peer organizations

Correct answer: C

Explanation

The availability of resources directly affects an organization's ability to implement effective risk management strategies, thereby influencing residual risk levels. While the other options may play a role, they do not have as direct an impact on the organization's remaining risk as the availability of resources does.