Certified in Risk and Information Systems Control (CRISC) — Question 1340

What is the process for selecting and implementing measures to impact risk called?

Answer options

• A. Risk Treatment
• B. Control
• C. Risk Assessment
• D. Risk Management

Correct answer: A

Explanation

The correct answer is A, Risk Treatment, as it specifically refers to the actions taken to mitigate or manage risks. Options B, Control, and C, Risk Assessment, do not encompass the full scope of selecting and implementing measures, while D, Risk Management, is a broader term that includes more than just the treatment phase.