risk response

{
  "id": "MLC-T-CYB-003620",
  "term": "risk response",
  "field": "Cybersecurity",
  "definition": "1. Accepting, avoiding, mitigating, sharing, or transferring risk to organizational operations, organizational assets, individuals, other organizations, or the Nation.\n\n2. Actions taken to remediate or mitigate risk or reconstitute capability in the event of loss or degradation.\n\n3. Accepting, avoiding, mitigating, sharing, or transferring risk to organizational operations (mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation.\n\n4. Accepting, avoiding, mitigating, sharing, or transferring risk to organizational operations (i.e., mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation. See Course of Action.\n\n5. Accepting, avoiding, mitigating, sharing, or transferring risk to agency operations, agency assets, individuals, other organizations, or the Nation.\n\n6. Intentional and informed decision and actions to accept, avoid, mitigate, share, or transfer an identified risk.\n\n7. A way to keep risk within tolerable levels. Negative risks can be accepted, transferred, mitigated, or avoided. Positive risks can be realized, shared, enhanced, or accepted.",
  "references": [
    "CNSSI 4009-2022 from OMB Circular A-130 (2016) (adapted); NIST SP 800-160 Vol. 2 Rev. 1 from NIST SP 800-39; NIST SP 800-39",
    "CNSSI 4009-2022 from DoDD 3020.40",
    "NIST SP 800-137 from NIST SP 800-39",
    "NIST SP 800-30 Rev. 1 from NIST SP 800-39",
    "NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016); NIST SP 800-53 Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016)",
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update] from NIST SP 800-53 Rev. 5 (adapted)",
    "NISTIR 8286",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/risk-response/"
}