Which term describes the set of actions to address risk, including accept, avoid, mitigate, transfer, and share?

Which term describes the set of actions to address risk, including accept, avoid, mitigate, transfer, and share?

• A. Risk management
• B. Incident response
• C. Disaster recovery
• D. Risk responses

Answer: (D)

Risk responses are the actions chosen to address risk after it's identified and evaluated. The options listed—accept, avoid, mitigate, transfer, and share—are the common categories of risk response strategies. Each category represents a way to handle a risk: accepting it means not taking action; avoiding it means altering plans to remove the risk; mitigating it lowers either the likelihood or impact; transferring it shifts the risk to another party through contracts or insurance; sharing distributes some risk with others. Together, these form the set of risk responses that a security program uses to manage risk. Risk management is the broader process that includes identifying, assessing, and prioritizing risks and then applying these responses. Incident response handles active security incidents, while disaster recovery focuses on restoring systems after a disaster.

Risk responses are the actions chosen to address risk after it's identified and evaluated. The options listed—accept, avoid, mitigate, transfer, and share—are the common categories of risk response strategies. Each category represents a way to handle a risk: accepting it means not taking action; avoiding it means altering plans to remove the risk; mitigating it lowers either the likelihood or impact; transferring it shifts the risk to another party through contracts or insurance; sharing distributes some risk with others. Together, these form the set of risk responses that a security program uses to manage risk. Risk management is the broader process that includes identifying, assessing, and prioritizing risks and then applying these responses. Incident response handles active security incidents, while disaster recovery focuses on restoring systems after a disaster.