Câu 363: Isaca Certified in Risk and Information Systems Control

Which of the following should be an element of the risk appetite of an organization?

1. A. The enterprise's capacity to absorb loss — đáp án hiện tại
2. B. The effectiveness of compensating controls
3. C. The amount of inherent risk considered appropriate
4. D. The residual risk affected be preventive controls