Which of the following surveys should be conducted to determine the effectiveness of risk controls...

A cost-benefit analysis should be conducted to evaluate the effectiveness of risk controls and justify their allocation within the security budget. This analysis compares the cost of implementing controls to the potential benefits, such as loss prevention or risk mitigation, ensuring resources are used efficiently.

ASIS Certified Protection Professional (CPP®) References:

Risk Mitigation Strategies: The CPP manual discusses cost-benefit analysis as a critical tool for decision-making in resource allocation.

Security Budgeting and Metrics: Chapter 7 outlines methods for evaluating the return on investment (ROI) of security measures.