Sara, the Chief Security Officer (CSO), has had four security breaches during the past two years.
Each breach has cost the company $3,000. A third party vendor has offered to repair the security hole in the
system for $25,000. The breached system is scheduled to be replaced in five years.
Which of the following should Sara do to address the risk?

A.
Accept the risk saving $10,000.

B.
Ignore the risk saving $5,000.

C.
Mitigate the risk saving $10,000.

D.
Transfer the risk saving $5,000.

Explanation:
Risk transference involves sharing some of the risk burden with someone else, such as an insurance company.
The cost of the security breach over a period of 5 years would amount to $30,000 and it is better to save
$5,000.