CERTIFIED-IN-CYBERSECURITY · Question #524
What is the difference between risk mitigation and risk acceptance?
The correct answer is D. Risk mitigation is the process of diminishing a risk, while risk acceptance is the process of. Risk mitigation involves taking actions to diminish the likelihood or impact of a risk - implementing controls, safeguards, or countermeasures to reduce exposure. Risk acceptance means acknowledging that a risk exists and consciously deciding to accept it without further…
Question
What is the difference between risk mitigation and risk acceptance?
Options
- ARisk mitigation is the process of transferring a risk to another party, while risk acceptance is the
- BRisk mitigation is the process of reducing a risk, while risk acceptance is the process of
- CRisk mitigation is the process of accepting a risk, while risk acceptance is the process of
- DRisk mitigation is the process of diminishing a risk, while risk acceptance is the process of
How the community answered
(22 responses)- A5% (1)
- D95% (21)
Explanation
Risk mitigation involves taking actions to diminish the likelihood or impact of a risk - implementing controls, safeguards, or countermeasures to reduce exposure. Risk acceptance means acknowledging that a risk exists and consciously deciding to accept it without further action, typically because the cost of mitigation exceeds the potential impact. Option D correctly frames mitigation as 'diminishing' a risk. Options A and C misdefine mitigation (transferring risk is risk transference; accepting risk is risk acceptance - not mitigation). Option B is partially correct but D is the more precise and complete distinction.
Topics
Community Discussion
No community discussion yet for this question.