Certified in Risk and Information Systems Control (CRISC) — Question 435

Which of the following is the MOST important objective from a cost perspective for considering aggregated risk responses in an organization?

Answer options

• A. Reduce likelihood
• B. Address more than one risk response
• C. Prioritize risk response options
• D. Reduce impact

Correct answer: B

Explanation

The correct answer is B because addressing more than one risk response can lead to more efficient use of resources and cost savings. The other options focus on reducing likelihood, prioritizing, or reducing impact, which are important but do not directly address the overarching goal of managing multiple risks effectively from a cost standpoint.