QuestionQ168Verified/Security Concepts and PracticesCopy linkReport a problemAsk AstroTutorSave questionA departure from an organization-wide security policy requires which of the following?ARisk AcceptanceBRisk AssignmentCRisk ReductionDRisk ContainmentShow AnswerAnswerExplanationA security-policy exception leaves a risk unaddressed by the required control, so an authorized stakeholder must formally accept that residual risk.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion