During a code review a software developer discovers a security risk that may result in hundreds of
hours of rework. The security team has classified these issues as low risk. Executive management
has decided that the code will not be rewritten. This is an example of:

A.
Risk avoidance

B.
Risk transference

C.
Risk mitigation

D.
Risk acceptance