Your company had a recent security breach resulting in data loss. The risk strategy prior was a mix of accepting and sharing the risk. You have been asked to recommend a different strategy going forward to prevent another security breach from occurring.

Avoiding and controlling the risk are both in the top quadrants with different levels of impact.

1. What is the challenge of just using an avoid the risk strategy? 2. How can you makeavoid and control the risk be successfully strategies to implement together?