A financial institution's information security officer is working with the risk management officer to determine what to do with the institution's residual risk after all security controls have been implemented. Considering the institution's very low risk tolerance, which of the following strategies would be BEST?
A) Transfer the risk.
B) Avoid the risk
C) Mitigate the risk.
D) Accept the risk.

Question

Quizplus · Accepted Answer

Transferring the risk is the best strategy for an institution with very low risk tolerance, as it involves shifting the risk to a third party, such as through insurance, thereby minimizing the institution's exposure to potential losses.

A Financial Institution's Information Security Officer Is Working with the Risk