A presenter explains that a risk has been 'accepted' rather than mitigated. Under which condition is risk acceptance MOST appropriate?
-
A
When the cost of mitigation exceeds the expected value of the loss
-
B
When the risk has a high probability and high impact
-
C
When no stakeholder is aware of the risk's existence
-
D
When the risk has already materialized into an actual incident