The CEO of a company is concerned that if a data breach should occur and customer data is exposed, the company could be sued. The CEO makes the decision to buy insurance for the company. What type of risk mitigation is the CEO implementing?

IT Questions Bank › Category: Cyber Threat Management › The CEO of a company is concerned that if a data breach should occur and customer data is exposed, the company could be sued. The CEO makes the decision to buy insurance for the company. What type of risk mitigation is the CEO implementing?

avoidance
mitigation
transference
reduction

Explanation: Buying insurance transfers the risk to a third party.

Exam with this question: Cybersecurity Essentials Chapter 6 Quiz Answers
Exam with this question: Cyber Threat Management - 5.4.2 Risk Management and Security Controls Quiz
Exam with this question: Cyber Threat Management: My Knowledge Check Answers