Risk Response and Mitigation

What is the purpose of the risk response process?

• To identify risk

• To develop risk response action plans

• To assess the effectiveness of controls

• To continuously improve risk management

Why is it important to align risk response choices with business objectives?

• To ensure continuous improvement

• To meet the organization's risk tolerance

• To design and implement controls

• To train personnel properly

What do risk response standards and frameworks help with?

• Identifying risk

• Developing risk response action plans

• Designing and implementing controls

• Aligning choices with business objectives

What is the purpose of risk response action plans?

• To assess the effectiveness of controls

• To continuously improve risk management

• To document the results of risk assessment

• To intentionally and planned respond to risk

How can project management skills be related to risk response?

• By translating project management into risk management

• By aligning choices with business objectives

• By developing risk response action plans

• By implementing and executing controls

Which risk management framework utilizes a six-step process for risk response?

• NIST

• ISO

• COBIT

• Sakar

In the NIST framework, which step is responsible for assessing security controls?

• Categorization of information systems

• Implementation of security controls

• Assessment of security controls

• Monitoring for risk response

Which domain in the Sakar risk management framework focuses on managing risk and reacting to events?

• Risk government

• Risk evaluation

• Risk response

• Risk mitigation

What is the goal of risk mitigation?

• To increase the vulnerability of assets

• To maximize the level of risk

• To reduce the likelihood of threat exploit

• To ignore the impact to the asset

Which type of control is implemented by management to help mitigate risk?

• Managerial controls

• Technical controls

• Physical controls

• Operational controls