Isaca
CISM · Question #573
Which of the following is the BEST course of action after management has reviewed identified risk and determines the risk is below the defined risk appetite?
The correct answer is B. Accept. If a risk is determined to be below the organization’s defined risk appetite, the best course of action is to accept it, as it falls within tolerable limits and does not require additional treatment.
Submitted by tunde_lagos· Apr 18, 2026Information Risk Management
Question
Which of the following is the BEST course of action after management has reviewed identified risk and determines the risk is below the defined risk appetite?
Options
- AAvoid
- BAccept
- CMitigate
- DTransfer
How the community answered
(44 responses)- A2% (1)
- B77% (34)
- C7% (3)
- D14% (6)
Explanation
If a risk is determined to be below the organization’s defined risk appetite, the best course of action is to accept it, as it falls within tolerable limits and does not require additional treatment.
Topics
#Risk appetite#Risk treatment options#Risk acceptance
Community Discussion
No community discussion yet for this question.