CRISC Certified in Risk and Information Systems Control – Question505

An organization has engaged a third party to provide an Internet gateway encryption service that protects sensitive data uploaded to a cloud service. This is an example of risk:

A.
transfer
B. acceptance
C. mitigation
D. avoidance

Correct Answer: A