A small organization has identified a potential risk associated with its outdated backup system and...

The organization is implementing anew cloud-based real-time backup systemto reduce the likelihood ofdata loss, which is an example ofrisk mitigationbecause:

Reducing Risk Impact:By upgrading from an outdated system, the organization minimizes the potential consequences of data loss.

Implementing Controls:The new backup system is aproactive control measuredesigned to decrease the risk.

Enhancing Recovery Capabilities:Real-time backups ensure that data remains intact and recoverable even in case of a failure.

Other options analysis:

B. Risk avoidance:Involves eliminating the risk entirely, not just reducing it.

C. Risk transfer:Typically involves shifting the risk to a third party (like insurance), not implementing technical controls.

D. Risk acceptance:Involves acknowledging the risk without implementing changes.

CCOA Official Review Manual, 1st Edition References:

Chapter 5: Risk Management:Clearly differentiates between mitigation, avoidance, transfer, and acceptance.

Chapter 7: Backup and Recovery Planning:Discusses modern data protection strategies and their risk implications.