Question 106
Main Page
A critical business system has no backup in place. What is the most appropriate initial risk treatment action?
A. Document the risk as accepted
B. Implement compensating controls immediately
C. Recommend modification by adding backup solutions
D. Purchase additional licensing
Answer: C. Recommend modification by adding backup solutions
Introducing backups mitigates the risk of data loss or unavailability—a direct risk treatment aligned with continuity.