When some risk identified as acceptable then one of the following is not required.
When some risk identified as acceptable then one of the following is not required.
When a risk is identified as acceptable, risk reduction is not required. Risk reduction involves taking steps to lessen the severity or likelihood of the risk, which is unnecessary if the risk has already been deemed acceptable. Risk evaluation, mitigation, and control still need to be considered to monitor and manage the risk appropriately.
The correct answer is A. Mitigation is the process through which one would decide to accept the risk. Reduction is taking action.