Choosing to outsource your firm's information security operations to a consultant is an example of:

accepting risk

rejecting risk

reducing risk

assigning risk

Question $22$

$2$ pts

Hearing a business owner who has not developed a security plan state $"$We are not a target. No attacker will ever look at us$"$ typifies a philosophy of:

reducing risk

rejecting risk

accepting risk

assigning risk