c为什么对

问题如下：

The manager Tommy identifies the types of risks the bank should transfer and assesses the impact of different risk transfer strategies on the bank’s risk profile. Which of the following actions is least appropriate?

选项：

A.

Non-core activities such as IT server management, cloud computing, or call centers can be outsourced.

B.

Outsource the reputational damage through insurance.

C.

Deduct the insurance recoveries from the bank’s required Basel operational risk capital.

D.

Acquire insurance against cyber risks and business interruptions from an insurance company.

解释：

考点：risk transfer

解析：声誉损害实际上无法通过保险外包或修复。因此，选项B说法错误，当选。