The Chief Security Officer (CSO) for an online retailer received a report from a penetration test that was performed against the company’s servers. After reviewing the report, the CSO decided not to implement the recommended changes due to cost; instead, the CSO increased insurance coverage for data breaches.
Which of the following describes how the CSO managed the risk?
A . Acceptance
B . Ignorance
C . Transference
D . Avoidance
Answer: C