CRISC - Risk Response and Reporting - Section 3.1

Evaluate and select risk treatment and response options consistent with the organisation's risk appetite.

Evaluate the four risk treatment options - mitigation, acceptance, transfer, and avoidance - and select the response consistent with the organisation's risk appetite and the cost of each option. Recognise that risk transfer through insurance or contracts shifts financial consequence but does not eliminate the underlying risk.

Examworthy is not affiliated with or endorsed by ISACA. Original, blueprint-aligned practice material only.