FAQ n.142366

Risk transfer is commonly associated with shifting the financial or operational consequences of a risk being shifted to a third party through insurance. In this sense, risk transfer is not a possible risk treatment option under Part-IS, since transferring responsibility to a third party (particularly an insurance company) does not imply active control of safety consequences, which is the objective of risk management in Part-IS.

Risk transfer is possible in other safety regulations, for example in the Air Operations domain. However, this is not to be confused with the risk treatment options under Part-IS, where the organisation has to take action to address identified security risks with an impact on safety.