Certified in Risk and Information Systems Control (CRISC) — Question 274

When an organization's disaster recovery plan has a reciprocal agreement, which of the following risk treatment options is being applied?

Answer options

• A. Transfer
• B. Avoidance
• C. Acceptance
• D. Mitigation

Correct answer: A

Explanation

The correct answer is A, Transfer, as a reciprocal agreement allows organizations to share resources in the event of a disaster, effectively transferring the risk. The other options, such as Avoidance, Acceptance, and Mitigation, do not involve the sharing of risks or resources with another organization.