Question: A risk management program would be expected to:
A.) remove all inherent risk.
B.) maintain residual risk at an acceptable level.
C.) implement preventive controls for every threat.
D.) reduce control risk to zero.

Download pdf (with explanations) edition of this exam.