After MFA, immutable backups, and segmentation, a school district still faces residual ransomware financial exposure. Which risk strategy best describes buying a cyber insurance policy for that remainder?
Select an answer to reveal the explanation.
Short Explanation
Insurance is handing part of the leftover bill to someone else when the storm still might hit. You've already put on the raincoat (controls); the policy transfers some of the remaining financial splash.
Full Explanation
Risk transfer shifts financial or contractual consequences to another party, commonly through insurance or certain contract clauses, after mitigations reduce but do not eliminate exposure. Avoidance would abandon the activity; undocumented ignoring is not a valid strategy; deleting backups increases impact rather than accepting residual risk responsibly.