The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.
A) transference
B) defense
C) acceptance
D) mitigation

Question

The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.
A) transference
B) defense 
C) acceptance
D) mitigation

Quizplus · Accepted Answer

The control strategy that attempts to shift the risk to other assets, processes, or organizations is called transference. This can be done through insurance, outsourcing, or other contractual agreements. Choice B, defense, refers to the measures taken to prevent or detect an attack before it occurs. Choice C, acceptance, means the organization is aware of the risk but has decided to accept it without any attempt to control it. Choice D, mitigation, refers to reducing the impact or likelihood of a risk by implementing controls or countermeasures.

The __________ Control Strategy Attempts to Shift Risk to Other