Essential CISM: Updated for the 15th Edition CISM Review Manual

by Phil Martin

risk acceptance occurs when an organization decides that no action is required for a specific risk – it is willing to suffer the consequences instead of expending resources to mitigate it.