Risk Rejection: An informal risk management approach where an organization chooses to ignore or deny the existence of a risk, often due to a lack of awareness or unwillingness to address it. This non-strategic behavior can stem from a cultural aversion to dealing with risks and generally leads to unpreparedness and vulnerability to potential threats.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D2: Information security risk management | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D3: Risk Identification Monitoring and Analysis
« Back to Glossary Index