nerdexam
Isaca

CRISC · Question #101

An organization has decided to postpone the assessment and treatment of several risk scenarios because stakeholders are unavailable. As a result of this decision, the risk associated with these new…

The correct answer is C. accepted. When an organization decides to postpone the assessment and treatment of risk without immediate action, it implicitly accepts the current level of risk. This decision means the organization acknowledges the risk and is willing to bear the potential consequences for a period.

Submitted by dimitri_ru· Apr 18, 2026Risk Response and Reporting

Question

An organization has decided to postpone the assessment and treatment of several risk scenarios because stakeholders are unavailable. As a result of this decision, the risk associated with these new entries has been;

Options

  • Amitigated
  • Bdeferred
  • Caccepted.
  • Dtransferred

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    78% (14)
  • D
    11% (2)

Why each option

When an organization decides to postpone the assessment and treatment of risk without immediate action, it implicitly accepts the current level of risk. This decision means the organization acknowledges the risk and is willing to bear the potential consequences for a period.

Amitigated

Mitigated means actions have been taken to reduce the likelihood or impact of the risk.

Bdeferred

Deferred is a general term for postponing, but in risk management, postponing assessment and treatment without other action typically defaults to acceptance rather than a distinct risk response strategy.

Caccepted.Correct

Risk acceptance occurs when an organization acknowledges a risk but decides not to take any action to reduce it, often due to low impact, high cost of mitigation, or, as in this case, a temporary inability to act. By postponing assessment and treatment, the organization is implicitly accepting the risk as it stands.

Dtransferred

Transferred means shifting the risk to another party, such as through insurance.

Concept tested: Risk response strategies: acceptance

Source: https://learn.microsoft.com/en-us/compliance/regulatory/risk-management-process

Topics

#Risk response#Risk acceptance#Risk treatment#Decision making

Community Discussion

No community discussion yet for this question.

Full CRISC Practice