An organization has outsourced its lease payment process to a service provider who lacks evidence of compliance with a necessary regulatory standard. Which risk treatment was adopted by the organization? 

Answer options:

A. Acceptance
B. Transfer
C. Mitigation
D. Avoidance

A