Certified in Risk and Information Systems Control (CRISC) — Question 922

The cost of maintaining a control has grown to exceed the potential loss. Which of the following BEST describes this situation?

Answer options

• A. Effective risk management
• B. Optimized control management
• C. Over-controlled environment
• D. Insufficient risk tolerance

Correct answer: C

Explanation

The correct answer is C, as it indicates that the control measures in place are excessive relative to the risks involved, leading to unnecessary costs. Options A and B imply a balance or efficiency in management, which does not apply here, while option D suggests a lack of risk acceptance, which does not directly relate to the high costs of control maintenance.