Certified in Risk and Information Systems Control (CRISC) — Question 642

The acceptance of control costs that exceed risk exposure is MOST likely demonstrates:

Answer options

• A. corporate culture alignment.
• B. corporate culture misalignment.
• C. low risk tolerance.
• D. high risk tolerance.

Correct answer: B

Explanation

The correct answer is B, as accepting control costs greater than the risk exposure suggests a disconnect with the organization's risk management principles. Options A, C, and D do not accurately reflect the implications of such acceptance, as they suggest alignment or a different risk tolerance level without addressing the misalignment.