Selects and implements appropriate controls for the identified risks.

Selects and implements appropriate controls for the identified risks.

• A. Risk Identification
• B. Risk Management
• C. Risk Treatment
• D. Risk Tracking

Answer: (C)

Risk treatment is about selecting and implementing controls to reduce the risks that were identified. After risks are discovered and assessed, you choose appropriate safeguards, policies, or actions to lower either the likelihood of the event or its impact, or to transfer, avoid, or accept the risk as appropriate. Implementing these controls is the key step in reducing exposure and shaping how the organization handles the risk going forward, which is why this option best fits the description. For context, risk identification is simply spotting potential threats, risk management encompasses the entire process from identification through treatment and monitoring, and risk tracking focuses on ongoing oversight of risk status and control effectiveness rather than the act of selecting and applying controls. Implementing controls to address identified risks is the essence of risk treatment.

Risk treatment is about selecting and implementing controls to reduce the risks that were identified. After risks are discovered and assessed, you choose appropriate safeguards, policies, or actions to lower either the likelihood of the event or its impact, or to transfer, avoid, or accept the risk as appropriate. Implementing these controls is the key step in reducing exposure and shaping how the organization handles the risk going forward, which is why this option best fits the description.

For context, risk identification is simply spotting potential threats, risk management encompasses the entire process from identification through treatment and monitoring, and risk tracking focuses on ongoing oversight of risk status and control effectiveness rather than the act of selecting and applying controls. Implementing controls to address identified risks is the essence of risk treatment.