Which term describes deciding not to take actions to mitigate a risk, effectively delaying remedy?

• A. Deferred Risks
• B. Risk Acceptance
• C. Risk Mitigation
• D. Risk Transfer

Answer: (A)

Deciding not to take actions to mitigate a risk, effectively delaying remedy, is risk acceptance in risk management. This approach means you acknowledge the risk, choose not to implement controls right away, and continue to operate with the possibility of impact while monitoring the situation. You might defer remediation due to cost, feasibility, or business priorities, but the formal stance is to accept the risk for the time being and revisit it later. For example, a low-severity vulnerability that’s unlikely to be exploited may be accepted rather than patched immediately, with plans to reassess if circumstances change.