A process to assess risks, to determine if risk reduction is required and to develop a plan to maintain risks at an acceptable level
A process to assess risks, to determine if risk reduction is required and to develop a plan to maintain risks at an acceptable level
Risk management is the process that encompasses assessing risks, determining if risk reduction is required, and developing a plan to maintain risks at an acceptable level. It is a broader concept that includes evaluating risks and implementing strategies and controls to mitigate those risks. Risk mitigation and risk control are components of the overall risk management process.
The correct answer is risk mitigation, per 3.1.55