Bearing Questproject family
Risk Trainer

Five findings. Two fixes. Your call.

You can't fix everything. Decide what to do with each risk.

Each scenario puts you in a security team with five findings and only enough people to fix a couple of them. For every finding, pick a risk response: avoid it, mitigate it (fix it or add a compensating control), transfer it, or accept it. If you accept a risk, choose who should sign off.

Submit and you'll get a score, the reasoning behind the expert answer, and how other learners answered. Each scenario shows about how long it takes.

New to the four responses? Read the reference first.

Scenarios