Question

Question 6 of 10
A record label's web application allows aspiring artists to schedule appointments with the producer. Although the application runs on outdated software and represents a security risk, the software is critical for the label to discover new talent.

The record label company requests that the software vendor address the security risks while instructing internal IT personnel to limit the software's access to its internal network.

What kind of risk response does this represent?

answer

Acceptance


Mitigation


Avoidance


Transference

Answer 1

The correct answer here is **Mitigation**.

Mitigation involves implementing measures to reduce the severity or likelihood of a risk. In this case, the record label is asking the vendor to address the security risks associated with the outdated software, which reflects an effort to reduce the potential harm that could arise from using the software while still maintaining its use for discovering new talent. Limiting the software's access to the internal network is also a mitigative measure to further reduce risk exposure.