An identified risk was addressed by applying a technical solution to reduce the likelihood or impact of an event. Which risk response has been applied?

The correct answer is A. Mitigate. Mitigation (A) is the risk response that reduces the likelihood and/or impact of a risk to an acceptable level through controls, countermeasures, or technical solutions. Avoidance (B) eliminates the risk entirely by stopping the activity that causes it. Acceptance (C) means…

Submitted by mateo_ar· Apr 18, 2026Information Security Risk Management

Question

Options

AMitigate
BAvoid
CAccept
DShare

How the community answered

(34 responses)

A
85% (29)
B
9% (3)
C
3% (1)
D
3% (1)

Explanation

Mitigation (A) is the risk response that reduces the likelihood and/or impact of a risk to an acceptable level through controls, countermeasures, or technical solutions. Avoidance (B) eliminates the risk entirely by stopping the activity that causes it. Acceptance (C) means knowingly taking on the risk without additional action. Risk sharing (D), also called transfer, shifts the financial or operational burden to a third party (e.g., insurance or outsourcing). Because a technical solution was applied to reduce - not eliminate or transfer - the risk, mitigation is the correct classification.

Topics

#Risk Response#Risk Mitigation#Technical Controls

Community Discussion

No community discussion yet for this question.

Full CISM Practice