The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?

Accept is a valid risk response where the organization acknowledges the risk and consciously decides to take no action to alter its probability or impact.

Mitigate is a valid risk response that reduces the likelihood or impact of a risk to an acceptable threshold through controls or countermeasures.

Delegate is not one of the five recognized risk response strategies in frameworks such as PMBOK or NIST SP 800-30. The standard five responses are Accept, Mitigate, Transfer, Avoid, and Exploit (or Reject in some frameworks). Delegating responsibility does not constitute a formal risk response strategy on its own.

Avoid is a valid risk response that eliminates the risk entirely by removing the cause or changing the plan to sidestep the threat.