Select ALL valid risk treatment options listed in the lesson.

### Why this is right - **Mitigate the risk with safeguards**: controls such as multifactor authentication or patching can reduce likelihood or impact. - **Transfer some risk through cybersecurity insurance**: insurance is the lesson’s example of transferring risk. - **Accept a risk when justified**: an organization may accept a limited risk, such as one involving a non-critical legacy system with limited exposure. - **Avoid a risk by eliminating the activity or exposure**: blocking USB devices is an example given for avoidance. ### The concept Risk treatment is the decision about what to do with an assessed risk. Mitigation reduces risk without necessarily eliminating it. Transfer shifts some financial consequences, acceptance retains the risk, and avoidance removes the activity or exposure that creates it. ### The other options - **Ignore every risk that cannot be measured precisely**: uncertainty is not a treatment option; qualitative analysis can still help an organization make reasoned decisions. ### Terms - **Legacy system**: an older system that remains in use, often because it still supports a business need. ### Remember Treatment means mitigate, transfer, accept, or avoid, not simply overlook.