IT Risk Fundamentals

Risk transfer applies when an enterprise transfers an affected activity or operation to a third party. Outsourcing disaster recovery to a provider with specialized capabilities therefore represents risk transfer, while the enterprise must still manage its third-party risk.