The reason to implement additional controls or safeguards is to:
A.
deter or remove the risk.
B.
remove the risk and eliminate the threat.
C.
reduce the impact of the threat.
D.
identify the risk and the threat.
Explanation:
C: Preventing a disaster is always better than trying to recover from one. If the planner can recommend controls to be put in place to prevent the most likely of risks from having an impact on the organizations ability to do business, then the planner will have fewer actual events to recover from. Page 277.