Which of the following is a mechanism for mitigating risks?

A. Security and control practices

B. Property and liability insurance

C. Audit and certification

D. Contracts and service level agreements (SLAs)

Explanation:

Risks are mitigated by implementing appropriate security and control practices. Insurance is a mechanism for transferring risk. Audit and certification are mechanisms of risk assurance, while contracts and SLAs are mechanisms of risk allocation.