An enterprise implemented a new control to mitigate a recurring risk event. Which of the following would best measure the effectiveness of the implemented control?
A) Reduction in financial impact on the annual report
B) Measurable reduction in likelihood, impact or both
C) Readjustment of risk appetite to meet residual risk