Appearance
← CISM syllabus chapters

Domain 2 · Objective reference 2B1 · Chapter 10 of 35

Choose and combine risk responses

About 5 minutes · Detailed public baseline effective 2022; the replacement exam starts 3 November 2026 and its exact revised topic/task mapping remains unverified

Session only. Enable saving or download a backup from this course’s hub.

Completion is self-reported and does not certify understanding.

See it · Try it · Recall it

Picture the topic

Remember this: Treatment changes risk; acceptance assigns a decision.

CISM · 2B1Branching concept mind map
Branching concept mind mapBranches identify related ideas. They show neither a ranking nor a chronological sequence. Avoid: Stop or redesign the risky activity. Reduce or share: Change exposure or contractual allocation. Accept: Obtain authorized acceptance of residual riskConnectthe ideasAvoidAReduce or shareBAcceptC
Branches identify related ideas. They show neither a ranking nor a chronological sequence.
Visual preferences

Reduced-motion preferences are respected. Highlights guide attention; they do not represent measured traffic or elapsed time.

Explore the anchors

Stop or redesign the risky activity.

Concept matching activity

Match this task or description to its concept:

Change exposure or contractual allocation.

Choose a concept before checking the explanation.

A quick way to study this topic
  1. Hide the explanation and redraw these three anchors from memory.
  2. Explain the difference between the anchors in your own words.
  3. Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
  4. Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.

Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.

What this chapter explains

Management concept and decision mechanism

Avoidance removes the activity creating exposure; mitigation changes likelihood or consequence; transfer allocates selected effects; acceptance retains risk through authorized decision. Responses can be combined. Insurance and supplier compensation do not necessarily restore service or remove legal and reputational consequences. Compare options against business objectives, obligations, costs, feasibility and residual exposure. Identify interim safeguards and verification. Acceptance should state duration, conditions and review triggers; approval based on a planned control must be distinguished from approval supported by an already effective control.

Compare realistic options

Risk responses may include avoiding an activity, reducing exposure, sharing some consequences through arrangements such as insurance, or retaining an understood exposure. Evaluate feasibility, cost, time, and the remaining risk for each option. A single response may combine several measures.

For a vulnerable service, possible actions include restricting access, implementing a supported replacement, or retiring an unused function. Compare the operational consequences of each action. A temporary restriction may reduce exposure while a permanent change is prepared, but it needs an owner and a review date.

Worked example

A supplier outage clause provides compensation, while the customer still funds alternate processing for the critical business activity.

Check your understanding

Which part of outage risk does a compensation clause not necessarily address?

Show explanation

The operational interruption, customer effect and retained obligations can remain even if some financial loss is covered.

Source and study boundary

Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.