The BEST strategy for risk management is to:

A.
achieve a balance between risk and organizational goals.

B.
reduce risk to an acceptable level.

C.
ensure that policy development properly considers organizational risks.

D.
ensure that all unmitigated risks are accepted by management.

Explanation:

The best strategy for risk management is to reduce risk to an acceptable level, as this will take into
account the organization’s appetite for risk and the fact that it would not be practical to eliminate all
risk. Achieving balance between risk and organizational goals is not always practical. Policy
development must consider organizational risks as well as business objectives. It may be prudent
to ensure that management understands and accepts risks that it is not willing to mitigate, but that
is a practice and is not sufficient to l>e considered a strategy.