Watch this video on YouTube
When selecting risk response options, what should be the main focus of an information security manager in terms of reducing risk?