Isaca
CISM · Question #540
Which of the following is the MOST appropriate risk response when the risk impact has been determined to be immaterial and the likelihood is very low?
The correct answer is D. Accept. When a risk’s potential impact is negligible and its likelihood is very low, the most cost-effective approach is to accept it rather than expend resources on mitigation, avoidance, or transfer.
Submitted by takeshi77· Apr 18, 2026Information Security Risk Management
Question
Which of the following is the MOST appropriate risk response when the risk impact has been determined to be immaterial and the likelihood is very low?
Options
- AMitigate
- BAvoid
- CTransfer
- DAccept
How the community answered
(16 responses)- C6% (1)
- D94% (15)
Explanation
When a risk’s potential impact is negligible and its likelihood is very low, the most cost-effective approach is to accept it rather than expend resources on mitigation, avoidance, or transfer.
Topics
#Risk Response#Risk Acceptance#Risk Treatment#Risk Management Strategy
Community Discussion
No community discussion yet for this question.