A risk handling technique in which the organization chooses to simply do nothing, as the cost of the risk being actualized is lower than the cost of the security control, is known as
a. Transfer
b. Avoidance
c. Acceptance
d. Mitigation
Risk acceptance is one way of risk management. In risk management this is not always the case every risk must be addressed. In some cases, the risk is identified as tolerable and no further action is taken to mitigate the risk. Risk acceptance considers the impact of the risk can be accepted or at least not up to a point to spend the limited resource to control it.
