Which of the following is a mechanism for mitigating risks?

A.
Security and control practices

B.
Property and liability insurance

C.
Audit and certification

D.
Contracts and service level agreements (SLAs)

Explanation:
Risks are mitigated by implementing appropriate security and control practices. Insurance is a mechanism for
transferring risk. Audit and certification are mechanisms of risk assurance, while contracts and SLAs are
mechanisms of risk allocation.