Which action is an example of risk mitigation in an organization's cybersecurity strategy?

Which action is an example of risk mitigation in an organization's cybersecurity strategy?

• A. Implement protective measures to prevent a risk
• B. Accept the risk
• C. Defer the risk
• D. Ignore the risk

Answer: (A)

Risk mitigation focuses on reducing the chance and impact of a threat by putting protective controls in place. In cybersecurity, this means actions like patching systems, enforcing strong authentication, segmenting networks, encrypting data, and monitoring for signs of compromise. By implementing these safeguards, you lower the probability that a vulnerability will be exploited or lessen the consequences if it is, which is the essence of mitigating risk. The other approaches don’t reduce risk: accepting the risk means you choose to live with the potential impact and take no action; deferring the risk postpones addressing it; ignoring the risk leaves the exposure unaddressed. Implementing protective measures directly reduces risk exposure, making it the best fit for risk mitigation.

Risk mitigation focuses on reducing the chance and impact of a threat by putting protective controls in place. In cybersecurity, this means actions like patching systems, enforcing strong authentication, segmenting networks, encrypting data, and monitoring for signs of compromise. By implementing these safeguards, you lower the probability that a vulnerability will be exploited or lessen the consequences if it is, which is the essence of mitigating risk.

The other approaches don’t reduce risk: accepting the risk means you choose to live with the potential impact and take no action; deferring the risk postpones addressing it; ignoring the risk leaves the exposure unaddressed. Implementing protective measures directly reduces risk exposure, making it the best fit for risk mitigation.