What would be an example of an organization transferring the risks associated with a data breach?

A. Using a third-party service to process credit card transactions.
B. Encrypting sensitive personal data during collection and storage

C. Purchasing insurance to cover the organization in case of a breach.

D. Applying industry standard data handling practices to the organization’ practices.

Reference: http://www.hpso.com/Documents/pdfs/newsletters/firm09-rehabv1.pdf