The MOST important function of a risk management program is to:

A.
quantify overall risk.

B.
minimize residual risk.

C.
eliminate inherent risk.

D.
maximize the sum of all annualized loss expectancies (ALEs).

Explanation:

A risk management program should minimize the amount of risk that cannot be otherwise
eliminated or transferred; this is the residual risk to the organization. Quantifying overall risk is
important but not as critical as the end result. Eliminating inherent risk is virtually impossible.
Maximizing the sum of all ALEs is actually the opposite of what is desirable.