What does 'Reject the Risk' mean?

• A. If the risk is beneficial and you have authority to apply the risk, go ahead.
• B. If the overall risk exceeds the benefit, then do not take the risk. This is a valid option when you do not have the authority to apply proper or necessary controls, and it ensures the risk decision is elevated.
• C. Always transfer the risk to someone else.
• D. Always delay action regardless of conditions.

Answer: (B)

Rejecting the risk means you won’t proceed with an action when the overall risk is greater than the potential benefit, and you don’t have authority to implement the necessary controls. In risk decisions you weigh mission or task benefit against possible harm to people, equipment, or the operation. If the risk outweighs the benefit and you can’t apply the proper mitigations or controls, the right move is to reject the risk and elevate the decision to someone who can authorize a different approach. This protects you from taking unacceptable risk and ensures the decision gets the proper level of approval. In contrast, proceeding when the risk is acceptable would mean accepting the risk, transferring it isn’t always possible, and delaying action isn’t the concept of rejecting risk.