CK Cyber 2 - LO1.3.A

What is the primary purpose of a risk assessment in an organization?

• To increase the value of assets

• To evaluate the current level of risk and identify potential risk mitigation strategies

• To eliminate all threats

• To determine the profitability of the organization

Which of the following best describes a risk in the context of risk assessment?

• A guaranteed loss to the organization

• A threat that can leverage a vulnerability to cause damage

• An opportunity for profit

• A measure of asset value

What is the first step in conducting a risk assessment?

• Determine threats

• Analyze risk

• Determine assets within the scope and their value

• Identify vulnerabilities

In the risk assessment process, what is the purpose of determining vulnerabilities?

• To increase the number of assets

• To identify weaknesses that could be exploited by threats

• To calculate the financial worth of the organization

• To eliminate all risks

What is the third step in the risk assessment process?

• Determine vulnerabilities

• Analyze risk

• Determine threats

• Determine asset value

Which of the following is NOT part of the scope of a risk assessment?

• Processes

• Actions

• Asset depreciation

• Locations

What is the fourth step in conducting a risk assessment?

• Determine asset value

• Analyze the risk posed by each vulnerability/threat

• Determine threats

• Identify vulnerabilities

Why is it important to determine the value of each asset in a risk assessment?

• To ensure all assets are insured

• To prioritize which assets need more protection

• To sell the assets at a higher price

• To eliminate low-value assets

What does the scope of a risk assessment include?

• Only financial assets

• The range of processes, actions, functions, assets, and locations for which risk is being evaluated

• Only physical locations

• Only digital data

Which step involves determining threats that could leverage vulnerabilities to cause harm?

• Step 1

• Step 2

• Step 3

• Step 4