A company purchased cyber insurance to address items listed on the risk register. Which of the following strategies does this represent?

Purchasing cyber insurance is a classic example of risk transfer. The financial burden of a potential cyber incident is shifted from the company to the insurance provider. Accept: This strategy involves acknowledging the risk and deciding to take no action to reduce its likelihood or impact. The company would simply bear the cost if an incident occurred. Mitigate: This strategy involves taking steps to reduce the likelihood or impact of a risk. Examples include implementing stronger security controls or employee training. Insurance doesn't reduce the risk itself, only the financial impact. Avoid: This strategy involves eliminating the risk entirely, often by not engaging in the activity that creates the risk. For instance, not using a particular cloud service to avoid its associated risks.