The Only Use of the Acceptance Strategy That Is Recognized

Multiple Choice

The only use of the acceptance strategy that is recognized as valid by industry practicesoccurs when the organization has done all but which of the following?

A) Determined the level of risk posed to the information asset
B) Performed a thorough cost-benefit analysis
C) Determined that the costs to control the risk to an information asset are much lower than the benefit gained from the information asset
D) Assessed the probability of attack and the likelihood of a successful exploitation of a vulnerability