Câu 277: Isaca Certified in Risk and Information Systems Control

What is the MAIN purpose of designing risk management programs?

1. A. To reduce the risk to a level that the enterprise is willing to accept — đáp án hiện tại
2. B. To reduce the risk to the point at which the benefit exceeds the expense
3. C. To reduce the risk to a level that is too small to be measurable
4. D. To reduce the risk to a rate of return that equals the current cost of capital