The only use of the acceptance strategy that is recognized as valid by industry practicesoccurs when the organization has done all but which of the following?
A) Determined the level of risk posed to the information asset
B) Performed a thorough cost-benefit analysis
C) Determined that the costs to control the risk to an information asset are much lower than the benefit gained from the information asset
D) Assessed the probability of attack and the likelihood of a successful exploitation of a vulnerability

Question

Quizplus · Accepted Answer

The acceptance strategy is valid when the costs to control the risk are higher, not lower, than the benefit gained from the information asset.

The Only Use of the Acceptance Strategy That Is Recognized