CK Cyber 2 - LO1.3.F

What is the primary purpose of documenting risk assessments in an organization?

• To increase the number of vulnerabilities

• To track assessments over time and find patterns

• To reduce the number of employees

• To increase the organization's revenue

Which of the following should be included in a risk assessment report?

• A list of employees

• A description of all vulnerabilities found for assets in scope

• The organization's annual budget

• A list of competitors

What is a key component of a risk assessment report regarding threats?

• A detailed explanation of how a threat could leverage a vulnerability

• A list of all employees' birthdays

• A summary of the company's history

• A list of all company assets

What should be analyzed in a risk assessment report?

• The company's stock prices

• The risk posed by each vulnerability/threat

• The number of employees

• The company's marketing strategies

Which of the following is NOT a recommended strategy for managing risks?

• Avoid

• Transfer

• Mitigate

• Ignore

What does risk avoidance aim to do?

• Increase the risk

• Stop the risk from occurring

• Transfer the risk to another party

• Accept the risk as it is

How can an organization manage a risk once it has been identified and analyzed?

• By ignoring it

• By avoiding, transferring, mitigating, or accepting it

• By increasing the risk

• By documenting it only

What is the role of a risk assessment report in an audit?

• To serve as an artifact if risk assessments are required

• To replace financial statements

• To provide employee performance reviews

• To list company assets

Which of the following is a method of risk management that involves sharing the risk with another party?

• Avoid

• Transfer

• Mitigate

• Accept

What is the purpose of analyzing the risk posed by each vulnerability/threat?

• To increase the number of threats

• To understand the potential impact and prioritize actions

• To decrease the number of employees

• To improve marketing strategies