DSM1244(4) RISK ASSESSMENT

Match

Match the following risk assessment elements

• recognising risk

• understanding risk

• compare analysis with tolerance level

Risk identification

Risk analysis

Risk evaluation

• Risk identification

• Risk analysis

• Risk evaluation

Categorize

Options (2)

historic incidents

most impact risk

Organize these risk assessment concepts into the right categories

Risk identification

Risk prioritisation

Multiple Choice

Risk assessment is a proactive measure.

• True

• False

Multiple Choice

There is no risk assessment standard.

• True

• False

Multiple Choice

Risk assessment is in the risk management process.

• True

• False

Multiple Choice

Security personnel don't need to document a risk-based management system.

• True

• False

Multiple Choice

Risk assessment is the identification, analysis and evaluation of uncertainties to objectives.

• True

• False

Multiple Choice

Risk Assessment does not compare desired and undesired outcomes with expected reward and loss of objectives.

• True

• False

Multiple Choice

Risk Assessment doesn't measure the capability of organization to manage risk.

• True

• False

Multiple Choice

Risk assessment programs are only conducted ad hoc.

• True

• False

Match

Match the following risk matrix concepts

• informed decisions for risk mitigation strategies

• disinformation strategy to manipulate fear of the unknown

• risk impact asset through exposure and potential mitigation

Heat map

FUD factor

Risk matrix

• Heat map

• FUD factor

• Risk matrix

Multiple Choice

Which is not a FUD factor?

• Fear

• Uncertainty

• Unavailable

• Doubt

Multiple Choice

Which does NOT refer to functions of risk matrix?

• risk impacting assets

• potential exposure

• improve and advance

• mitigation options

Match

Match the following risk assessment approaches

• Statistics

• Experiential judgement

• Subjective and numerical

Quantitative

Qualitative

Combined

• Quantitative

• Qualitative

• Combined

Multiple Choice

Risk are assessed through qualitative and quantitative approach.

• True

• False

Multiple Choice

Quantitative analysis uses mathematical formulas and calculations.

• True

• False

Multiple Choice

Data interpreted through numbers, data and estimates refers to quantitative analysis.

• True

• False

Multiple Choice

It is easy to quantify the likelihood of threats.

• True

• False

Multiple Choice

Quantitative analysis is better than qualitative in analyzing threats.

• True

• False

Multiple Choice

Complementary approach when risks are described and communicated by subjective and numerical values.

Which risk assessment analysis does this refer to?

• Quantitative

• Qualitative

• Combined

• None