Risk Management and Cybersecurity Quiz

What is an example of a physical device used in risk management?

• Encryption

• Antivirus software

• Vault

• Firewall

What is the purpose of cybersecurity risk management?

• To protect against physical risks

• To prevent unauthorized access to data

• To manage financial risks

• To provide insurance coverage

What is the first step in the basic steps of risk assessment?

• Analyze the Control Environment

• Identify Threats

• Characterize the System

• Determine Inherent Risk and Impact

What is the purpose of determining a likelihood rating in risk assessment?

• To determine inherent risk and impact

• To assess the control environment

• To identify potential threats

• To calculate the risk rating

What is reputational risk related to?

• Adverse business decisions

• Negative public opinion

• Problems with service or product delivery

• Loss resulting from inadequate processes

What is the process of identifying, managing, recording, and analyzing security threats or incidents in real-time called?

• Incident Handling

• Risk Monitoring

• Backup and Recovery

• Compliance Risk

What is the importance of backup and recovery in data security?

• To protect against unauthorized changes

• To provide a history of an intruder's activities

• To identify prime backup targets

• All of the above

What is the first step in the incident handling process?

• Respond to the incident

• Assess identified incidents

• Prepare for handling incidents

• Identify potential security incidents

What is the purpose of incident documentation/report?

• To identify assets and backup requirements

• To establish an incident response team

• To develop a backup and recovery strategy

• To document workplace injuries

What is the purpose of addressing the alarming level of cyber risks?

• To treat the problem as a compliance issue

• To delegate problem to IT/CISO

• To develop a more proactive, collaborative approach

• To throw resources at the problem