[Risk Assessment and Incident Recovery] Which of the following risk mitigation strategies involves execution of controls to reduce the risk factor…

Risk assumption involves accepting the potential risk and continuing to operate the IT system while

implementing controls to reduce the risk to an acceptable level. This strategy acknowledges that

some level of risk is inevitable and focuses on managing it through mitigation measures rather than

eliminating it entirely. Risk avoidance would entail taking actions to avoid the risk entirely, risk

planning involves preparing for potential risks, and risk transference shifts the risk to another party,

typically through insurance or outsourcing. Risk assumption is a pragmatic approach that balances

the need for operational continuity with the imperative of risk management.

Reference:The ECIH v3 certification program covers various risk mitigation strategies, emphasizing

the selection of the appropriate approach based on the organization's risk tolerance and the specific

context of the threat.