Question $4(1$ point$)$

A critical infrastructure organization, such as a power grid or a healthcare system, is concerned about the potential for cyberattacks. They are considering implementing a variety of risk mitigation measures to reduce the likelihood and impact of cyberattacks.

Which of the following best describes the primary goal of risk mitigation strategies in critical infrastructure protection?

To reduce the likelihood of cyberattacks occurring, minimizing the potential for disruption and damage to critical infrastructure systems.

To eliminate all risks and vulnerabilities in critical infrastructure systems, ensuring their complete protection from cyberattacks.

To achieve a balance between risk reduction and cost$-$effectiveness, ensuring that risk mitigation measures are proportionate to the potential threats and vulnerabilities.

To minimize the impact of cyberattacks when they do occur, limiting the extent critical infrastructure systems.