DSM2504(4) DIAGNOSING VULNERABILITIES

Reorder

Reorder the following crisis preparation steps

• Vulnerabilities

• Crisis types

• Crisis Management Team (CMT)

• Spokesperson

• Crisis Management Plan (CMP)

1

2

3

4

5

• 1
• 2
• 3
• 4
• 5

Multiple Choice

Which is NOT true about crisis vulnerabilities?

• Extension of signal detection

• Based on location and type of organisation

• Uses issues management

• Reviewed by risk committee

Reorder

Reorder the following Risk Assessment based on ISO 31000

• Risk identification

• Risk analysis

• Risk evaluation

1

2

3

• 1
• 2
• 3

Multiple Choice

Which Enterprise Security Risk Management (ESRM) step refers to diagnosing vulnerabilities?

• Identify & prioritise asset

• Identify & prioritise risk

• Mitigate prioritised risk

• Improve & advance

Multiple Choice

According to ISO31000, risk assessment is ...

• Characteristics of effective and efficient risk management

• Integrating risk management into activities and functions

• Reducing organisational vulnerabilities

• Overall process of risk identification, analysis, and evaluation

Match

Match the following risk assessment process

• Find, recognize and describe risks

• Comprehend risk nature and characteristics

• Support decisions

identification

analysis

evaluation

• identification

• analysis

• evaluation

Match

Match the following risk assessment process

• Most common natural disaster is flood

• Flood is likely to happen but there are few negative impacts

• Deciding to do nothing about flood

identification

analysis

evaluation

• identification

• analysis

• evaluation

Multiple Choice

All risk triangle elements must be present for threat to be considered a risk

• True

• False

Match

Match the following risk triangle

• something threatening asset

• threat level happening to asset

• consequence of threat happening

threat

exposure

impact

• threat

• exposure

• impact

Match

Match the following risk triangle

• Data being hacked

• No antivirus installed

• Loss of data

threat

exposure

impact

• threat

• exposure

• impact

Match

Match the following risk identification techniques

• Systematic Literature Review on police culture

• Research on police stress factors

• Economist claims corruption among police is due to low wage

Evidence

Empirical

Perception survey

• Evidence

• Empirical

• Perception survey

Match

Match the following risk identification techniques

• SWIFT

• scenario analysis

• SWOT

Smaller element

Imaginative thinking

Checklist

• Smaller element

• Imaginative thinking

• Checklist

Multiple Choice

According to IEC31010:2019, risk register is ...

• Combination of risk information to inform those exposed and have responsibility to manage it

• Risk with range of consequence values, displayed as a probability

  distribution of consequences (PDF)

• Combination of likelihood and consequence for risk prioritisation

• Graphical depiction of pathways from causes to consequences of events

Multiple Choice

Which is NOT a risk register component?

• Responsibility

• Likelihood

• Causes

• Control

Multiple Choice

According to IEC31010:2019, risk matrix is ...

• Combination of risk information to inform those exposed and have responsibility to manage it

• Risk with range of consequence values, displayed as a probability

  distribution of consequences (PDF)

• Combination of likelihood and consequence for risk prioritisation

• Graphical depiction of pathways from causes to consequences of events

Multiple Choice

According to the risk matrix, what number point scales are most common?

• 3

• 4

• 5

• 7

Match

Match the following risk matrix

• 4 people had died during Shah Alam's devastating flood in 2021

• Flooding happens every end of the year due to the monsoon season

• The most significant risk is flooding

Consequence

Likelihood

Priority rating

• Consequence

• Likelihood

• Priority rating