Câu 26: CAS-003: CompTIA Advanced Security Practitioner (CASP) CAS-003

Management is reviewing the results of a recent risk assessment of the organization's policies and procedures. During the risk assessment it is determined that procedures associated with background checks have not been effectively implemented. In response to this risk, the organization elects to revise policies and procedures related to background checks and use a third-party to perform background checks on all new employees. Which of the following risk management strategies has the organization employed?

1. A. Transfer
2. B. Mitigate — đáp án hiện tại
3. C. Accept
4. D. Avoid
5. E. Reject