nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #524

What is the difference between risk mitigation and risk acceptance?

The correct answer is D. Risk mitigation is the process of diminishing a risk, while risk acceptance is the process of. Risk mitigation involves taking actions to diminish the likelihood or impact of a risk - implementing controls, safeguards, or countermeasures to reduce exposure. Risk acceptance means acknowledging that a risk exists and consciously deciding to accept it without further…

Security Principles

Question

What is the difference between risk mitigation and risk acceptance?

Options

  • ARisk mitigation is the process of transferring a risk to another party, while risk acceptance is the
  • BRisk mitigation is the process of reducing a risk, while risk acceptance is the process of
  • CRisk mitigation is the process of accepting a risk, while risk acceptance is the process of
  • DRisk mitigation is the process of diminishing a risk, while risk acceptance is the process of

How the community answered

(22 responses)
  • A
    5% (1)
  • D
    95% (21)

Explanation

Risk mitigation involves taking actions to diminish the likelihood or impact of a risk - implementing controls, safeguards, or countermeasures to reduce exposure. Risk acceptance means acknowledging that a risk exists and consciously deciding to accept it without further action, typically because the cost of mitigation exceeds the potential impact. Option D correctly frames mitigation as 'diminishing' a risk. Options A and C misdefine mitigation (transferring risk is risk transference; accepting risk is risk acceptance - not mitigation). Option B is partially correct but D is the more precise and complete distinction.

Topics

#Risk Management#Risk Mitigation#Risk Acceptance

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice