Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Mitigation is the correct answer. Avoidance = don’t continue with the project.
By this action, David has eliminated the threat entirely by ensuring it will not occur. Mitigation reduces the probability but does not eliminate it completely.
1. Avoidance ✅ • Change the project plan or approach to eliminate the risk entirely. • Often involves extra cost or effort. • Example: Adding extra safety measures, redesigning a process, or changing vendors to prevent the risk. 2. Mitigation • Reduce likelihood or impact, but risk may still occur. • Less drastic than avoidance. 3. Acceptance • Acknowledge the risk but take no proactive steps. • Can be passive (do nothing) or active (set aside contingency). 4. Transfer • Shift the risk to a third party, e.g., insurance, outsourcing.