Exam CRISC topic 1 question 1250 discussion

If it is highly cost effective that does not make it "high cost", it means it is a good choice based on cost. So high cost effectiveness coupled with high risk would be the optimal choice here. D is what I would go with.

the low hanging fruits principle goes with D.

Change response, reason: There is another similar question in the BBDD that talks about 'not prioritizing' the less effective responses. However, in this case it talks about which one to address FIRST. It would be more logical to prioritize the responses that are more effective and have high cost effectiveness ratios, especially if both have high risk levels. It's important to consider both the potential impact of the risk and the cost-effectiveness of the proposed response when classifying and prioritizing risk responses. By prioritizing the most effective responses with high cost effectiveness ratios, the organization can maximize the use of its resources and reduce the potential impact of the risk.

The areas to address FIRST when classifying and prioritizing risk responses are those with high risk levels and low cost effectiveness ratios. Risk responses can be classified and prioritized based on the potential impact of the risk and the cost-effectiveness of the proposed response. High-risk levels imply a greater likelihood of the risk occurring and a higher potential impact if it does occur. Low cost-effectiveness ratios indicate that the proposed response would be less efficient or less effective in mitigating the risk compared to other potential responses. Addressing high-risk areas first is important because these risks have the potential to cause significant damage to the organization. In addition, addressing low-cost effectiveness areas first can help to ensure that resources are allocated efficiently and that the most effective responses are implemented. Therefore, when classifying and prioritizing risk responses, the areas to address FIRST are those with high risk levels and low cost effectiveness ratios.

Go with C, as risk is high and cost is low.