Which of the following risk management strategies describes applying a compensating control to a device rather than patching?

Rationale

Mitigation

In risk management, applying a compensating control involves implementing alternative security measures to address vulnerabilities instead of patching the device directly. This strategy aims to reduce the risk exposure associated with unpatched systems by introducing additional safeguards or countermeasures.

A (Acceptance) YOUR ANSWER

Acceptance in risk management refers to acknowledging the existence of a risk without taking active measures to address or mitigate it. This strategy is suitable when the cost of managing the risk outweighs the potential impact, making it more cost-effective to accept the risk rather than invest in controls.

B (Mitigation) CORRECT

Correct. Mitigation involves taking actions to lessen the impact or probability of a risk. When applying a compensating control to a device instead of patching, it falls under the mitigation strategy. By implementing compensating controls, organizations can reduce the risk posed by unpatched vulnerabilities while maintaining operational functionality.

C (Avoidance) YOUR ANSWER

Risk avoidance entails steering clear of activities or situations that could lead to potential risks. This strategy aims to eliminate the possibility of a risk occurring altogether, often by choosing not to engage in high-risk activities or environments.

D (Transference) YOUR ANSWER

Transference involves shifting the risk to another party, typically through insurance or outsourcing arrangements. Organizations opt for risk transference when they transfer the financial consequences of a risk to a third party better equipped to manage or absorb it.

Conclusion

In the context of risk management, applying compensating controls to devices instead of patching aligns with the mitigation strategy. By proactively implementing alternative security measures, organizations can effectively reduce the exposure to vulnerabilities and enhance their overall security posture without immediately addressing the root cause through patching.

Which of the following risk management strategies describes applying a compensating control to a device rather than patching?

Mitigation

Related Questions

Related Quizzes

How familiar were you with this question?

Report an Issue

Rate this Practice Test