Even though the internal policy of a company states they must install all patches, the security team decides to bypass one of the patches because they believe the risk of applying it is greater than not applying it. Instead, they will wait for the next version of the patch. In the meantime, what strategy has the company adopted? Select two. Question 23 options: The company is avoiding the risk. The company is granting an exception. The company is granting an exemption. The company is mitigating the risk. The company is accepting the risk