Question

Kerpak works in the security office of a medium-sized entertainment company. Kerpak is asked to assess a particular threat, and he suggests that the best way to counter this threat would be to purchase and implement a particular security solution. This is an example of _______.

A) Risk acceptance
B) Risk mitigation
C) Risk avoidance
D) Risk transfer

Answer 1

Kerpak's suggestion to purchase and implement a security solution is an example of Risk Mitigation, which is a proactive approach to reduce vulnerability or impact of a threat on the company.

Step-by-step explanation:

Kerpak works in the security office of a medium-sized entertainment company and is asked to assess a particular threat. He suggests purchasing and implementing a specific security solution to counter this threat. This is an example of Risk Mitigation. Risk mitigation involves implementing measures to reduce the vulnerability to a threat or minimize the impact of it. In contrast, risk acceptance means deciding not to change one's practices or spending money to address the risk, risk avoidance would involve altering practices to avoid the risk entirely, and risk transfer would mean shifting the risk to another party, often through insurance or outsourcing. The act of purchasing and implementing a security solution is a proactive measure to deal with the threat, hence it is a classic strategy of risk mitigation.