Certified Information Systems Auditor CISA · Free Practice Question Medium
Question 20
The choices of risk treatment are:
- A Risk reduction, risk avoidance, and risk acceptance
- B Risk reduction, risk transfer, and risk acceptance
- C Risk sharing, risk transfer, risk avoidance, and risk acceptance
- D Risk reduction, risk transfer, risk avoidance, and risk acceptance
Reveal correct answer
Correct answer: D
Explanation
Correct Answer:
Risk reduction, risk transfer, risk avoidance, and risk acceptance is correct. There are four possible positions that an organization can take for a risk: it can reduce the risk through some form of risk mitigation, it can transfer the risk to another organization (usually, this takes the form of insurance), it can discontinue the activity that created the risk (risk avoidance), or it can accept the risk as is.
Incorrect Answers:
All other answers are incorrect.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
