The transfer of risk is one of the five risk treatment methods pointed out in NIST 800-37 Rev 2. Choose an example of risk transfer from the following options. Response:

Control inheritance is a strategy where a system receives security controls from another source, representing a form of control implementation, not risk transfer.

Control implementation is a risk treatment method where security controls are put into place to reduce risk, not to transfer it to another entity.

A warranty transfers the financial risk of equipment failure or defects from the user to the manufacturer or a third-party insurer, which is a classic example of risk transfer.

Avoidance is a risk treatment method where an activity or system associated with a risk is discontinued or not undertaken, thereby eliminating the risk entirely, not transferring it.