Control Failure Factor represents the impact of Control Failures on which score?

• A. Inherent
• B. Residual
• C. Total
• D. Calculated

Answer: (D)

Control Failure Factor is about how much risk rises when a control fails, and that effect is applied during the risk calculation to produce the final computed score. Inherent risk is the baseline risk before controls, and residual risk is the risk after applying controls; the factor directly influences the calculation that yields the overall (calculated) risk score, not the pre-control baseline or the post-control level itself. So the impact of control failures is reflected in the calculated score.