Which activity involves applying software updates and patches to reduce vulnerabilities and exposure to risk?

Which activity involves applying software updates and patches to reduce vulnerabilities and exposure to risk?

• A. Risk Mitigation
• B. Risk Assessment
• C. Risk Transfer
• D. Deferral

Answer: (A)

Mitigating risk through applying software updates and patches reduces vulnerabilities and exposure to threats. Patching closes known security gaps, making it harder for attackers to exploit weaknesses and lowering the system’s overall risk level. Risk assessment focuses on identifying and evaluating risks, not actively reducing them. Risk transfer moves the risk to another party, such as through insurance or outsourcing. Deferral means delaying action, which doesn’t actually reduce risk. So updating and patching is a concrete mitigation step to lessen risk.

Mitigating risk through applying software updates and patches reduces vulnerabilities and exposure to threats. Patching closes known security gaps, making it harder for attackers to exploit weaknesses and lowering the system’s overall risk level. Risk assessment focuses on identifying and evaluating risks, not actively reducing them. Risk transfer moves the risk to another party, such as through insurance or outsourcing. Deferral means delaying action, which doesn’t actually reduce risk. So updating and patching is a concrete mitigation step to lessen risk.