When prioritizing risk response, management should FIRST:
A . evaluate the organization’s ability and expertise to implement the solution.
B . evaluate the risk response of similar organizations.
C . determine which risk factors have high remediation costs.
D . address high risk factors that have efficient and effective solutions.
Answer: A