Which statement about risk control effectiveness and cost is true?

Which statement about risk control effectiveness and cost is true?

• A. The most effective controls are always the most expensive.
• B. All effective controls are equally costly.
• C. Effectiveness is independent of cost.
• D. The most effective controls balance risk reduction with cost.

Answer: (D)

In risk control, you weigh how much risk a measure reduces against what it costs to implement and maintain. The best options are those that achieve meaningful risk reduction without exceeding what the benefit justifies financially. Because returns on additional risk reduction often diminish as you spend more, the most effective controls are those that strike a balance—maximizing risk reduction for a reasonable cost through a cost–benefit perspective. Some cheaper controls can be highly effective, others may be costly with only marginal added benefit, so the optimal choice combines impactful risk reduction with acceptable expense.

In risk control, you weigh how much risk a measure reduces against what it costs to implement and maintain. The best options are those that achieve meaningful risk reduction without exceeding what the benefit justifies financially. Because returns on additional risk reduction often diminish as you spend more, the most effective controls are those that strike a balance—maximizing risk reduction for a reasonable cost through a cost–benefit perspective. Some cheaper controls can be highly effective, others may be costly with only marginal added benefit, so the optimal choice combines impactful risk reduction with acceptable expense.