Which of the following plans would not be a considered a mitigation control approach?
A) Incident response plan
B) Acceptance plan
C) Disaster recovery plan
D) Business continuity plan

Question

Quizplus · Accepted Answer

An acceptance plan is not a mitigation control approach. An acceptance plan is a risk response technique where the organization accepts the risk and does not take any action to mitigate or transfer it. The other options listed (incident response plan, disaster recovery plan, and business continuity plan) are all examples of mitigation control approaches.

Which of the Following Plans Would Not Be a Considered