CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ127

VerifiedSecure Software Lifecycle Management

Adrian is the project manager for the NHP Project. Her project includes several work packages involving electrical wiring. Rather than managing the risk internally, she has chosen to hire a vendor to complete all work packages involving electrical wiring. By transferring the internal risk to a licensed electrician, Adrian feels more comfortable that the project team will be safe. What type of risk response has Adrian used in this example?

Explanation

Risk transference shifts the impact of a threat and ownership of its response to a third party. Contracting a licensed vendor to perform the electrical-wiring work transfers responsibility for that specialized risk externally.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!