Which statement about risk tolerance and hazard mitigation is true?

• A. Higher risk tolerance leads to more aggressive mitigation.
• B. Higher risk tolerance means the organization will accept more risk and may implement less aggressive mitigation.
• C. Risk tolerance has no impact on mitigation decisions.
• D. Risk tolerance determines only staff training budgets.

Answer: (D)

Risk tolerance is the level of risk an organization is willing to accept while pursuing its objectives, and it guides how hazard controls are chosen and how resources are allocated. When risk tolerance is low, the organization pursues stronger, more comprehensive mitigation measures and invests across various areas to shrink risk. When risk tolerance is higher, some residual risk is accepted, and mitigation may be less aggressive or prioritized differently. Training is important, but it's only one component of risk mitigation. The overall strategy also includes engineering controls, process changes, monitoring, incident response, insurance, and budget decisions across multiple domains. Saying risk tolerance determines only staff training budgets doesn't capture how it shapes the entire approach to reducing risk.