CompTIA Cloud Essentials+ (CLO-002)Governance, Risk, Compliance and SecurityEasy
A logistics company determines that migrating its order-tracking application to the cloud carries a moderate risk of data loss during transfer. To address this, the company schedules the migration during low-traffic hours, performs incremental backups throughout the process, and validates data integrity checksums after each transfer batch. Which risk management strategy is the company applying?
- ARisk acceptance
- BRisk transfer
- CRisk avoidance
- DRisk mitigation
Show answer & explanationAnswer & explanation
Correct answer: D. Risk mitigation
Risk mitigation involves taking proactive steps to reduce the likelihood or impact of a risk, such as scheduling, backups, and validation checks, rather than eliminating, accepting, or shifting the risk elsewhere.
Why the other options are wrong
- A. Acceptance means acknowledging the risk and taking no action, which contradicts the proactive steps described.
- B. Transfer would shift the risk to a third party such as an insurer or vendor, which is not described here.
- C. Avoidance would mean canceling the migration entirely to eliminate the risk, not proceeding with safeguards.
Risk Mitigation
A risk management strategy that reduces the likelihood or impact of a risk through proactive controls, rather than eliminating, accepting, or transferring it.
- Involves adding safeguards like backups, redundancy, or scheduling
- Does not eliminate risk entirely, just reduces it
- One of four core risk response strategies
Memory trick: MATA: Mitigate, Avoid, Transfer, Accept