Certified in Risk and Information Systems Control (CRISC) — Question 180

Which of the following would be MOST useful when measuring the progress of a risk response action plan?

Answer options

• A. Resource expenditure against budget
• B. An up-to-date risk register
• C. Percentage of mitigated risk scenarios
• D. Annual loss expectancy (ALE) changes

Correct answer: C

Explanation

The percentage of mitigated risk scenarios directly indicates how many risks have been successfully addressed, making it the most relevant measure of progress in a risk response action plan. In contrast, resource expenditure and budget, an updated risk register, and changes in annual loss expectancy do not specifically reflect the implementation success of the risk responses.