An organization identifies a risk and decides to stop the activity that creates it. Which treatment has it selected?

### Why this is right Avoidance removes the exposure by stopping the activity that creates the risk. It differs from mitigation, which reduces risk while the activity continues. ### The concept Risk treatment follows assessment and prioritization. An organization may reduce a risk, shift some consequences, retain it knowingly, or discontinue the activity causing it. The selection should reflect the risk and organizational requirements. ### The other options - **Acceptance**: this means knowingly retaining the risk, not ending the activity. - **Transfer**: this shifts some consequences to another party but does not necessarily stop the activity. - **Mitigation**: this reduces likelihood or impact through safeguards while exposure may remain. ### Terms - **Risk avoidance**: Discontinuing an activity to remove its associated exposure. - **Risk mitigation**: Reducing risk rather than necessarily eliminating the activity. ### Remember Stopping the risky activity is avoidance; reducing its danger is mitigation.