When is it acceptable not to take action on an identified risk?

Question

Options

• ANever. Good security has to address and reduce all risks.
• BWhen political issues prevent this type of risk from being addressed.
• CWhen the necessary countermeasure is too complex.
• DWhen the cost of the countermeasure outweighs the value of the asset and the potential loss.

• A
  5% (1)
• B
  5% (1)
• C
  9% (2)
• D
  82% (18)

No community discussion yet for this question.