Free CompTIA Security+ SY0-701 Practice Question

This statement is false. Accepting potential impacts without mitigation is known as risk acceptance, not risk transference. Risk transference involves shifting the risk to a third party, such as purchasing insurance or outsourcing services. By accepting the risk, an organization chooses to bear the consequences themselves, whereas risk transference involves another entity assuming the risk on behalf of the organization.