Certified in Risk and Information Systems Control (CRISC) — Question 765

Which of the following provides the MOST useful information to determine risk exposure following control implementations?

Answer options

• A. Risk escalation and process for communication
• B. Strategic plan and risk management integration
• C. Risk limits, thresholds, and indicators
• D. Policies, standards, and procedures

Correct answer: C

Explanation

Option C is the correct answer because risk limits, thresholds, and indicators provide specific metrics and benchmarks that help assess the effectiveness of implemented controls. The other options, while relevant to risk management, do not directly measure risk exposure in the same detailed manner as option C.