management has been informed of a risk to personally identifiable information (pii) that results from an…

management has been informed of a risk to personally identifiable information (pii) that results from an application being developed and managed by the company. they have chosen not to do anything with the risk. what risk management approach have they taken? a risk mitigation b risk avoidance c risk transference d risk acceptance

management has been informed of a risk to personally identifiable information (pii) that results from an application being developed and managed by the company. they have chosen not to do anything with the risk. what risk management approach have they taken? a risk mitigation b risk avoidance c risk transference d risk acceptance

Answer

Brief Explanations:

Risk mitigation reduces the impact or likelihood of a risk. Risk avoidance means not engaging in activities that pose the risk. Risk transference shifts the risk to another party. Risk acceptance is when an organization decides to do nothing and accept the potential consequences of the risk. Since management has chosen not to do anything with the risk, they have accepted it.

Answer:

D. Risk acceptance