# 3. Monitor

The risk treatment stage corresponds to the response to the identified risk. 

Several responses are possible: 

* *risk **reduction**:* measures must be implemented to reduce the risk 
* *risk **acceptance**:* the raw risk is accepted by the organization as it stands, without reduction measures 
* *risk **avoidance**:* the risk prevents the activity in question from being carried out 
* *risk **transfer***: the risk weighing on the organization can be transferred to another organization (via insurance, for example) 
* *risk-**taking**:* the risk should be subject to mitigation measures, but the organization agrees not to implement them. 

This is the responsibility of the risk owner.