Question

A risk practitioner has documented four approved risk responses awaiting implementation. Resources are constrained, so only one treatment can begin this quarter. Which factor should MOST influence the decision on which response to implement first?

Accepted Answer

The response that addresses the risk with the highest level of residual risk relative to risk appetite

Answer

The response that is easiest and least costly to deploy with existing staff

Answer

The response that the control owner is most enthusiastic about championing

Answer

The response that was approved earliest by the risk committee