Certified in Risk and Information Systems Control (CRISC) — Question 506

Which of the following would provide the BEST guidance when selecting an appropriate risk treatment plan?

Answer options

• A. Return on investment (ROI)
• B. Risk mitigation budget
• C. Cost-benefit analysis
• D. Business impact analysis (BIA)

Correct answer: C

Explanation

A Cost-benefit analysis (C) provides a comprehensive assessment of the potential costs and benefits associated with different risk treatment options, making it the best choice for guidance. While Return on investment (ROI), Risk mitigation budget, and Business impact analysis (BIA) are useful, they do not provide the same level of detailed comparison necessary for informed decision-making in risk treatment.