Because of a potential data breach, an organization has decided to temporarily shut down its online sales order system until sufficient controls can be implemented. Which risk treatment has been…

Risk avoidance involves making a conscious decision to not engage in an activity or to stop an activity that carries a high level of risk. By temporarily shutting down the online sales order system, the organization completely eliminates the exposure to the potential data breach risk, thus avoiding it.

Risk acceptance is when an organization acknowledges a risk and decides to take no action to reduce it, which is contrary to shutting down the system.

Risk mitigation involves taking steps to reduce the likelihood or impact of a risk, such as implementing new controls, but shutting down the system eliminates the risk, rather than just reducing it.

Risk transfer involves shifting the financial burden or responsibility of a risk to a third party, often through insurance or contracts, which is not what shutting down a system achieves.