Certified in Risk and Information Systems Control (CRISC) — Question 751

Which of the following provides the BEST evidence that a selected risk treatment plan is effective?

Answer options

• A. Evaluating the residual risk level.
• B. Identifying key risk indicators (KRIs).
• C. Evaluating the return on investment (ROI).
• D. Performing a cost-benefit analysis.

Correct answer: A

Explanation

Evaluating the residual risk level directly assesses the effectiveness of the risk treatment plan by measuring any remaining risks after the treatment has been applied. The other options, such as identifying key risk indicators, evaluating ROI, and performing a cost-benefit analysis, provide useful information but do not specifically measure the success of the treatment plan itself.