Match each risk response strategy to its definition.
Drag a concept onto its matching description — or click a concept then click the description.
Eliminate the activity that causes the risk
Reduce the likelihood or impact of the risk
Shift the risk to a third party, e.g., insurance
Acknowledge the risk and take no further action
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Avoid: Identifying a risk and making the decision to no longer perform the activity that gives rise to the risk.
The correct matches are: Avoid – decision to not perform the activity; Accept – formal acceptance of risk; Mitigate – reduce likelihood/impact; Transfer – shift to another party. Common confusions include mixing transfer with avoidance and acceptance with mitigation.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Avoid: Identifying a risk and making the decision to no longer perform the activity that gives rise to the risk.
Why this is correct
Correct: Risk avoidance means eliminating the risk by discontinuing the activity.
Avoid: Shifting the risk to another party.
Why it's wrong here
Incorrect: This describes risk transfer, not avoidance.
Accept: A decision to accept the consequences and likelihood of a risk.
Why this is correct
Correct: Risk acceptance is a conscious decision to retain the risk.
Accept: Actions taken to reduce the likelihood or impact of a risk.
Why it's wrong here
Incorrect: This describes risk mitigation, not acceptance.
Mitigate: Actions taken to reduce the likelihood or impact of a risk.
Why this is correct
Correct: Risk mitigation involves implementing controls to reduce risk.
Transfer: Shifting the risk to another party, e.g., through insurance or outsourcing.
Why this is correct
Correct: Risk transfer moves the risk to a third party.
Go deeper
About these practice questions
This CRISC question is part of Courseiva's 983-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.