An organization is evaluating potential risks. One risk they have uncovered is very unlikely to occur, and it would cost more to implement a fix for the risk than it would cost if the vulnerability was actually exploited. In this scenario, which risk response is the organization likely to take?