The MOST important function of a risk management program is to:

A.
quantify overall risk.

B.
minimize residual risk.

C.
eliminate inherent risk.

D.
maximize the sum of all annualized loss expectancies (ALEs).

Explanation:

A risk management program should minimize the amount of risk that cannot be otherwise eliminated or transferred; this is the residual risk to the organization. Quantifying overall risk is important but not as critical as the end result. Eliminating inherent risk is virtually impossible. Maximizing the sum of all ALEs is actually the opposite of what is desirable.