CRISC: Certified in Risk and Information Systems ControlDemo

Question

Wendy has identified a risk event in her project with a $75,000 impact and a 60 percent likelihood of occurring. Through research, her project team learns that the risk impact can be reduced to only $15,000 with a ten percent chance of occurrence. The proposed solution will cost $25,000. Wendy agrees to the $25,000 solution. What type of risk response is this?

A Mitigation
B Avoidance
C Transference
D Enhancing

Explanation

Risk mitigation involves taking action to reduce a threat’s probability of occurrence and/or its impact. The $25,000 solution lowers both the likelihood and the potential loss while leaving a residual risk.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1136

Community Discussion