CAS-002 · Question #15
A business is currently in the process of upgrading its network infrastructure to accommodate a personnel growth of over fifty percent within the next six months. All preliminary planning has been…
The correct answer is D. Transferring risk. Transferring risk means shifting the financial or operational liability for a risk to another party, typically through contracts, insurance, or service-level agreements. An SLA with a third party is a textbook example of risk transfer: the company contractually obligates the…
Question
A business is currently in the process of upgrading its network infrastructure to accommodate a personnel growth of over fifty percent within the next six months. All preliminary planning has been completed and a risk assessment plan is being adopted to decide which security controls to put in place throughout each phase. Which of the following risk responses is MOST likely being considered if the business is creating an SLA with a third party?
Options
- AAccepting risk
- BMitigating risk
- CIdentifying risk
- DTransferring risk
How the community answered
(39 responses)- A5% (2)
- C3% (1)
- D92% (36)
Explanation
Transferring risk means shifting the financial or operational liability for a risk to another party, typically through contracts, insurance, or service-level agreements. An SLA with a third party is a textbook example of risk transfer: the company contractually obligates the vendor to meet performance and security standards, and assigns liability to the vendor if those standards are not met. Accepting risk (A) means acknowledging and living with the risk without action. Mitigating risk (B) means implementing controls to reduce the likelihood or impact. Identifying risk (C) is the assessment phase, not a response strategy.
Topics
Community Discussion
No community discussion yet for this question.