Residual risk for missing MFA on a citizen-facing portal remains above appetite. Which response and linkage is appropriate?
Select an answer to reveal the explanation.
Short Explanation
Above appetite and fixable? Mitigate — and glue real MFA remediation tasks to the risk so the decision is not just a hopeful label.
Full Explanation
A mitigate treatment reduces risk through remediation actions linked to the risk record, such as MFA deployment tasks. Accept without ownership, deleting the record while exposure remains, or cosmetic renaming without true transfer are incorrect treatments.