Certified in Risk and Information Systems Control (CRISC) — Question 1442

An organization has decided to postpone the assessment and treatment of several risk scenarios because stakeholders are unavailable. As a result of this decision, the risk associated with these new entries has been:

Answer options

• A. accepted
• B. mitigated
• C. deferred
• D. transferred

Correct answer: A

Explanation

The correct answer is 'accepted' because when an organization decides to postpone addressing certain risks, they are essentially acknowledging these risks without taking immediate action. The other options, such as 'mitigated,' 'deferred,' and 'transferred,' imply different risk management strategies that involve active steps to reduce or allocate the risk, which are not being taken in this scenario.