ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Risk avoidance removes exposure by deciding not to undertake the activity that creates the threat. By canceling the image-upload feature, the company eliminates the possibility of malicious files entering its environment, driving the likelihood of that specific risk to zero. The other options are different strategies: accepting the risk would proceed without additional controls, transferring would shift liability to another party (e.g., cyber-insurance or a managed service), and mitigating would implement technical safeguards such as antivirus scanning or isolated upload processing while still offering the feature.