ITPEC IP October 2024 Question 43
ITPEC IP October 2024 — Question 43 of 100
Choosing to take no particular countermeasure after evaluating the flood risk is risk acceptance. Management recognizes the threat and its possible effect but judges the likelihood sufficiently low to retain the residual risk. Acceptance should be an informed and authorized decision consistent with the organization's risk criteria, not an accidental failure to notice the risk.
Answer (c)
Why not others:
- (a) Risk transfer shifts part of the financial or operational consequence to another party, for example through insurance or a contract
- (b) Risk avoidance removes the activity or condition that creates the risk, such as relocating the server room
- (d) Risk mitigation introduces controls to reduce likelihood or impact
Key rule: Recognize and retain is acceptance; eliminate is avoidance, reduce is mitigation, and shift is transfer.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.