risk responses

Also written: accept, avoid, transfer, mitigate, cyber insurance

The ways a business can respond to a risk: lower it with controls, move part of it to someone else (for example with cyber insurance), avoid it, or accept it knowingly. The system owner makes the call.