Risk Treatment Moves Quick Reference
Recall risk treatment options and common misuse patterns.
When is risk acceptance legitimate? When residual risk is understood, within appetite, approved by the right authority, and set for review. Acceptance is a governed decision, not a way to avoid treatment work. Recall Mitigate versus avoid Compare Choose based on business value, feasibility, and appetite, not fear. The owner says: "We transferred the risk because the vendor contract has security language." Contracts can share consequences, but they do not operate the vendor control for you. Your line Good contractual terms help, but we still need supplier oversight evidence and a residual-risk decision for any control gap that remains. It…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in