The BEST strategy for risk management is to:

A.
achieve a balance between risk and organizational goals.

B.
reduce risk to an acceptable level.

C.
ensure that policy development properly considers organizational risks.

D.
ensure that all unmitigated risks are accepted by management.

Explanation:
The best strategy for risk management is to reduce risk to an acceptable level, as this will take into account the organization’s appetite for risk and the fact that it would not be practical to eliminate all risk. Achieving balance between risk and organizational goals is not always practical. Policy development must consider organizational risks as well as business objectives. It may be prudent to ensure that management understands and accepts risks that it is not willing to mitigate, but that is a practice and is not sufficient to be considered a strategy.