## Risk Response Strategies

You found a Critical Vuln. What now?

1.  **Mitigate (Remediate)**: Fix it. (Apply Patch). Preferred.
2.  **Accept**: "We know it risky, but we need Windows XP for this old robot arm. We accept the risk." (Must be signed by Exec).
3.  **Transfer**: Buy Insurance. "If we get hacked, Insurance pays."
4.  **Avoid**: Turn off the functionality. "Disable SMBv1".