312-50V10 · Question #483
The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?
The correct answer is C. Delegate. The five standard risk response strategies are Accept, Mitigate, Transfer, Avoid, and Exploit (for positive risks). Delegate is not a recognized risk response.
Question
The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?
Options
- AAccept
- BMitigate
- CDelegate
- DAvoid
How the community answered
(46 responses)- A2% (1)
- B2% (1)
- C91% (42)
- D4% (2)
Why each option
The five standard risk response strategies are Accept, Mitigate, Transfer, Avoid, and Exploit (for positive risks). Delegate is not a recognized risk response.
Accept is a valid risk response strategy where the organization acknowledges the risk and chooses not to act unless it materializes.
Mitigate is a valid risk response strategy that involves taking steps to reduce the probability or impact of a risk.
Delegation is not one of the five core risk response strategies defined in risk management frameworks such as NIST SP 800-30 and PMBOK. The recognized responses are Avoid (eliminate the risk), Mitigate (reduce likelihood or impact), Transfer (shift risk to a third party), Accept (acknowledge and tolerate it), and Exploit (for opportunities). Delegation describes assigning a task, not a strategy for handling risk.
Avoid is a valid risk response strategy that eliminates the threat by removing the cause or changing the plan entirely.
Concept tested: Risk management response strategies classification
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf
Topics
Community Discussion
No community discussion yet for this question.