Risk Management and Cybersecurity Quiz

What is an example of a basic risk management concept?

• Sales

• Finance

• Insurance

• Marketing

What does cybersecurity risk management rely on to protect an enterprise against attacks?

• Doors and locks

• Strategies, technologies, and user education

• Physical devices

• Insurance

What is the first step in the basic steps of risk assessment?

• Analyze the Control Environment

• Identify Threats

• Characterize the System

• Determine Inherent Risk and Impact

What is the purpose of analyzing the control environment in risk assessment?

• To identify threats

• To determine inherent risk and impact

• To calculate the risk rating

• To assess the control environment adequately

What is the likelihood rating when the threat-source is highly motivated and sufficiently capable, and the controls to prevent the vulnerability from being exercised are ineffective?

• Medium

• High

• Low

• Severe

What is strategic risk related to in a business context?

• Adverse business decisions

• Negative public opinion

• Loss resulting from inadequate processes

• Problems with service or product delivery

What is the focus of the monitoring program of the future in cybersecurity risk management?

• Data

• Talent

• Alignment

• Analytics

What is the first step in the incident handling and documentation process?

• Prepare for handling incidents

• Identify potential security incidents

• Respond to the incident

• Assess identified incidents

What is the importance of data backup and recovery in any security strategy?

• Protecting against negative media attention

• All of the above

• Protecting against unauthorized changes

• Protecting against hardware failure

What is the first step in creating a backup and recovery strategy?

• Identify prime backup targets

• Create a backup and recovery strategy

• Test the backups

• Develop a comprehensive security strategy