Which of the following is the BEST indicator of the effectiveness of IT risk management processes?
A . Time between when IT risk scenarios are identified and the enterprise’s response.
B . Percentage of business users completing risk training.
C . Percentage of high-risk scenarios for which risk action plans have been developed.
D . Number of key risk indicators (KRIs) defined.
Answer: C