Which of the following is BEST described by a scenario where management chooses not to implement a security control for a given risk?
A. Mitigation
B. Avoidance
C. Acceptance
D. Transference
Answer: C. Acceptance
Computer Science & Information Technology