Generally, an organization will not operate beyond the limits of their risk appetite. Risk appetite has generally been exceeded when:
a. The likelihood and impact of negative events significantly exceeds residual risks.
b. The likelihood and impact of positive events is within the residual risk.
c. The likelihood and impact of negative events exceed residual risks.
d. The likelihood and impact of positive events is significantly below residual risk.
Answer: A