Which of the following risk decisions will be the best for the project in terms of its successful continuation with the most business profit?

Suppose your company has just passed a security risk assessment exercise. The results display that the risk of the breach in the main company application is 50%. Security staff has taken some measures and implemented the necessary controls. After that, another security risk assessment was performed showing that risk has decreased to 10%. The risk threshold for the application is 20%.

Which of the following risk decisions will be the best for the project in terms of its successful continuation with the most business profit?
A . Accept the risk
B . Introduce more controls to bring risk to 0%
C . Mitigate the risk
D . Avoid the risk

Answer: A