Which statement best describes risk acceptance?

• A. It eliminates risk completely.
• B. It transfers risk to a third party.
• C. It guarantees zero loss.
• D. It does not reduce any effects and is used when the cost of other options outweighs the risk.

Answer: (D)

Risk acceptance is a deliberate decision in risk management to not implement controls for a known risk because the cost of mitigating it would outweigh the potential impact. This matches the idea that it does not reduce the effects of the risk and is used when the cost of other options outweighs the risk. In practice, you acknowledge the residual risk, document the decision, and monitor for changes, accepting that some loss could occur but choosing to proceed because mitigation isn’t justifiable. This is different from eliminating the risk (which isn’t always possible), transferring it to someone else (which shifts the risk rather than reducing it), or promising zero loss (which is unrealistic).