An enterprise has moved its data center from a flood-prone area where it had experienced significant service disruptions to one that is not a flood zone. Which risk response strategy has the organization selected?
By moving its data center from a flood-prone area to one that is not in a flood zone, the organization has chosen a risk avoidance strategy.
Risk Response Strategies Overview:
Risk Acceptance: Choosing to accept the risk without taking any action.
Risk Avoidance: Taking action to completely avoid the risk.
Risk Mitigation: Implementing measures to reduce the likelihood or impact of the risk.
Risk Transfer: Shifting the risk to another party (e.g., through insurance).
Explanation of Risk Avoidance:
Risk avoidance involves changing plans to circumvent the risk entirely.
In this case, relocating the data center to an area not prone to flooding eliminates the risk of flood-related disruptions.
References:
ISA 315 (Revised 2019), Anlage 6 discusses various risk response strategies and emphasizes the importance of taking actions to avoid risks when feasible.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit