Certified in Risk and Information Systems Control (CRISC) — Question 168
Which of the following should be the MOST important consideration for senior management when developing a risk response strategy?
Answer options
- A. Risk appetite
- B. Cost of controls
- C. Risk tolerance
- D. Probability definition
Correct answer: A
Explanation
Risk appetite represents the level of risk that an organization is willing to accept in pursuit of its objectives, making it the most critical factor for senior management. The cost of controls, risk tolerance, and probability definition are important considerations, but they should align with the established risk appetite to ensure effective risk management.