The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?

Accept is a valid risk response where the organization acknowledges the risk and decides to proceed without additional controls, often when the cost of mitigation exceeds the potential impact.

Mitigate is a valid risk response that involves taking actions to reduce the probability or impact of a risk to an acceptable level.

Delegate is not one of the five standard risk response strategies recognized in risk management frameworks such as NIST SP 800-39 and PMBOK. Delegation may describe an administrative act of assigning responsibility, but it is not a strategy for addressing the risk itself. The five recognized responses are: Accept (acknowledge and live with the risk), Avoid (eliminate the activity causing the risk), Transfer (shift the risk to a third party such as through insurance), Mitigate (reduce the likelihood or impact), and Exploit (for positive risks or opportunities).

Avoid is a valid risk response where the organization changes its plans or activities to eliminate the risk or protect objectives from its impact.