C. Risk assessment
A risk assessment is the best approach for selecting controls to minimize risk because it involves identifying, analyzing, and evaluating potential risks to an organization's assets. By understanding the risks faced by an organization, it becomes possible to prioritize and select controls that are most effective in reducing those risks. While industry best practices, cost-benefit analysis, and control-effectiveness evaluations are important considerations in selecting controls, they are typically more effective when informed by the results of a comprehensive risk assessment.
Cost-benefit analysis is used to justify the expense associated with the implementation of controls.
It is not used for selecting a control. COntrol effectiveness is used to select the control. It is D
during the response stage the effectiveness of the controls and its design is done. once effective controls are available, management can pick based on the the cost effective criteria.
This section is not available anymore. Please use the main Exam Page.CRISC Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Promz
9 months, 3 weeks agoK5000ism
1 year agomynk29
1 year, 7 months agoCbtL
1 year, 8 months agoBroesweelies
1 year, 8 months agoKoulyo
1 year, 8 months agoKoulyo
1 year, 9 months agoChachacha12
1 year, 2 months ago