Which of the following is a mechanism for mitigating risks?

A.
Security and control practices

B.
Property and liability insurance

C.
Audit and certification

D.
Contracts and service level agreements (SLAs)

Explanation:

Risks are mitigated by implementing appropriate security and control practices. Insurance is a
mechanism for transferring risk. Audit and certification are mechanisms of risk assurance, while
contracts and SLAs are mechanisms of risk allocation.