Evaluates the performance of the implemented risk management strategies.

• A. Risk Identification
• B. Risk Assessment
• C. Risk Review
• D. Risk Management

Answer: (C)

The question is about checking how well the risk controls and responses are performing after they’ve been put in place. This requires looking at how effective the measures are, whether residual risk sits within acceptable levels, and what adjustments are needed as conditions change. That ongoing evaluation of performance and effectiveness is what a risk review covers—continuously monitoring, auditing, and updating risk controls based on results.

Risk identification is about finding what could go wrong; risk assessment analyzes the probability and impact of those risks; risk management encompasses the overall process of identifying, assessing, treating, and monitoring risks. Among these, evaluating performance after implementation specifically aligns with risk review.