If the final set of security controls does not eliminate all risk in a system, what could be done next?

Question

Options

• AContinue to apply controls until there is zero risk.
• BIgnore any remaining risk.
• CIf the residual risk is low enough, it can be accepted.
• DRemove current controls since they are not completely effective.

• A
  5% (2)
• B
  5% (2)
• C
  76% (32)
• D
  14% (6)

No community discussion yet for this question.