問題文
Two treatments address the same AI risk. One costs a tenth of the other and reduces the risk by a third and the other reduces it almost entirely. The risk is above tolerance. What should the practitioner recommend?
選択肢
- Whichever treatment the business owner prefers since the owner carries the exposure and is accountable for deciding how much of it the enterprise should live with.
- The cheaper treatment and on the basis that a third of the reduction achieved immediately is worth more than a larger reduction achieved after the funding for the more expensive option has been obtained.
- The cheaper treatment with the difference in cost recorded as a saving and the residual position reported to the risk committee each quarter until the remaining exposure can be addressed in a future budget cycle.
- The treatment that brings the risk within tolerance since a cheaper option that leaves it above tolerance does not resolve the position.