During risk treatment, which strategy involves selecting safeguards to lessen either the likelihood or impact of a threat without eliminating the activity that creates the risk?
Transference
Mitigation
Acceptance
Avoidance
The strategy described is mitigation. When an organization mitigates a risk, it implements controls-such as technical safeguards, administrative policies, or physical protections-to reduce the probability that the threat will be realized, the damage it can cause, or both. Mitigation keeps the activity in place but attempts to make it safer.
Avoidance takes the opposite approach by stopping or never starting the risky activity, thereby removing the exposure altogether. Transference shifts the financial responsibility for loss to another party (for example, through insurance or outsourcing). Acceptance means the organization consciously decides to tolerate the risk without further action, usually because the cost of additional controls would exceed the expected loss. Because only mitigation focuses on reducing likelihood or impact while allowing the activity to continue, it is the correct answer.
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
All IT & Cybersecurity Package plans include the following perks and exams .
Our pricing is simple. Full access to all certifications and exams in each package, for one price.
As many practice tests for as many topics as you want.
Use study mode non-stop, no limits.
Access to our AI assistant, Bash, trained to help you pass your exam.
Track your scores over time in study mode and report cards.
See how you improve over time, and where you need to focus.
Access our store with even bigger discounts than before.
Unlimited access to all performance questions and be prepared for the real thing.
All IT & Cybersecurity Package plans include unlimited access to the following study materials.
Create an account or sign in to access our study materials.