Senior management has requested a risk practitioner ' s guidance on whether
a new technical control requested by a business unit is worth the investment.
Which of the following should be the MOST important consideration before
providing input?
The cost of the control relative to the value of risk mitigation
The effectiveness of the control at reducing residual risk levels
The likelihood of a successful attack based on current risk
assessments
The availabilitv of budgeted funds for risk mitigationMitination
Submit