FFIEC IT Examination Handbook
Information Security

FFIEC IT Examination Handbook IS-III.B.3: Risk Mitigation Strategy

Mitigation strategies including accept, transfer, avoid, or reduce are selected based on risk appetite and cost-benefit analysis.

Other controls in Information Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.