ITPEC IP April 2025 Question 44

Source exam: ITPEC IP April 2025Topic: Security

ITPEC IP April 2025 — Question 44 of 100

Transfer or distribute the risk through an agreement, such as insurance — this is risk sharing.

Insurance does not remove the underlying event, but contractually transfers or shares part of its financial impact with another organization. Outsourcing or contractual allocation can also share particular consequences and responsibilities, although accountability must still be managed.

Answer (c)

Why not others:
- (a) is risk avoidance: stop the risky activity

- (b) is risk mitigation: reduce likelihood or impact through controls

- (d) is risk retention: knowingly accept the residual risk

Key rule: The four treatments are avoid, mitigate, share or transfer, and retain; identify them by what happens to the activity and its remaining impact.

AI-generated — may contain errors

The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.

This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.