an organization recently completed a risk assessment. based on the findings in the risk assessment, the organization chose to purchase insurance to cover possible losses. this approach is known as: