Which term refers to actions taken to lessen the probability, negative consequences, or both associated with a risk?

Which term refers to actions taken to lessen the probability, negative consequences, or both associated with a risk?

• A. Risk analysis
• B. Risk criteria
• C. Risk tolerance
• D. Risk reduction

Answer: (C)

Actions taken to lessen the probability or the consequences of a risk are called risk reduction. This involves implementing controls, safeguards, and countermeasures to lower how likely the risk is to occur or how severe its impact would be if it does occur. Examples include applying security patches, adding access controls, creating redundancy, backing up data, training staff, and establishing incident response plans. This differs from risk analysis, which is about identifying and evaluating risks; risk criteria, which are the standards used to judge risk levels; and risk tolerance, which is the amount of risk an organization is willing to accept.

Actions taken to lessen the probability or the consequences of a risk are called risk reduction. This involves implementing controls, safeguards, and countermeasures to lower how likely the risk is to occur or how severe its impact would be if it does occur. Examples include applying security patches, adding access controls, creating redundancy, backing up data, training staff, and establishing incident response plans.

This differs from risk analysis, which is about identifying and evaluating risks; risk criteria, which are the standards used to judge risk levels; and risk tolerance, which is the amount of risk an organization is willing to accept.