Certified Secure Software Lifecycle Professional (CSSLP) — Question 8

There are seven risks responses that a project manager can choose from. Which risk response is appropriate for both positive and negative risk events?

Answer options

• A. Acceptance
• B. Transference
• C. Sharing
• D. Mitigation

Correct answer: A

Explanation

The correct answer is A, Acceptance, as it applies to both positive and negative risks by acknowledging them without taking any action. Options B, Transference, and C, Sharing, are specific to positive or negative risks but do not address both types effectively. Option D, Mitigation, is focused on reducing negative risks and does not apply to positive risks.