Anomaly 42 - Trivia 14

What should be the primary objective of a risk management strategy? CISM

a. Determine the organization's risk appetite. - This is just being lazy

b. Identify credible risks and transfer them to an external party. - We should not just give away all the risk

c. Identify credible risks and reduce them to an acceptable level.

d. Eliminate credible risks. - We can never elimate risks