transfer (risk response) — A response to a threat where a third party takes on responsibility for some of the financial impact of the threat (e.g. through insurance or by means of appropriate clauses in a contract).