In risk management, what is the primary purpose of the risk treatment step?

In risk management, what is the primary purpose of the risk treatment step?

• A. To document risk without action
• B. To transfer all risk to another organization
• C. To implement controls to reduce risk
• D. To ignore risk until it becomes severe

Answer: (C)

In risk management, the step of risk treatment is about taking action to lower the risk to an acceptable level by implementing controls. This means selecting and applying measures that reduce either how likely the risk is to occur, how severe the impact would be if it happens, or both. Examples include engineering controls, updated procedures, training, policies, and ongoing monitoring. The goal is to reduce exposure to risk so that it’s tolerable; simply documenting risks without acting, trying to shift all risk to someone else, or ignoring risks until they become severe wouldn’t actually reduce the threat or its consequences.

In risk management, the step of risk treatment is about taking action to lower the risk to an acceptable level by implementing controls. This means selecting and applying measures that reduce either how likely the risk is to occur, how severe the impact would be if it happens, or both. Examples include engineering controls, updated procedures, training, policies, and ongoing monitoring. The goal is to reduce exposure to risk so that it’s tolerable; simply documenting risks without acting, trying to shift all risk to someone else, or ignoring risks until they become severe wouldn’t actually reduce the threat or its consequences.