Risk Response
Noun · Security & Infosec
Definitions
The chosen course of action for handling a risk, such as mitigating it, accepting it, avoiding it, or transferring it. Risk response is where analysis becomes an actual decision with owners, timelines, and consequences.
In plain English: The decision about what to do with a risk.
Example: "The approved risk response was to isolate the legacy service now and decommission it by year end rather than accept ongoing exposure."