Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 14

A deviation or exception from a security standard requires which of the following?

A. risk acceptance

B. risk assignment

C. risk reduction

D. risk containment

Step 1 of 2

Exception from standards

When risk is contained, few more activities might be required than the ones mentioned in the standard. Hence, risk containment requires a deviation from a security standard.

Thus the correct option is.