Question

A retail company operates an in-house customer loyalty analytics platform that is neither core to its business nor generating meaningful revenue. A recent assessment reveals the platform stores large volumes of sensitive customer data and carries significant compliance and breach exposure that would be costly to fully mitigate. Management confirms the platform's continued operation provides little strategic value. Which risk response is MOST appropriate?

Accepted Answer

Avoid the risk by decommissioning the platform and discontinuing the activity

Answer

Mitigate the risk by implementing additional encryption and access controls

Answer

Transfer the risk by purchasing cyber insurance to cover potential breach losses

Answer

Accept the risk and document it in the risk register with periodic monitoring