SRM Module (Risk)

According to PETRONAS Security Policy, security is whose responsibility?

• Security is everyone's responsibility

• Security is OPU's responsibility

• Security is PETRONAS's responsibility

• Security is anyone's responsibility

What is risk?

• The effect of multiple probability to achieve organizations' objectives

• The effect of uncertainty on achievement of an organizations’ objectives

• The effect of certainty on achievement of an organizations’ objectives

• The effect of uncertainty and certainty to achieve organizations' objective

What are the elements of security risk? Select the correct answer

• Threat, Assets, Risk

• Threat, Assets, Existing Control Measures

• Threat, Assets, Operations

• Threat, Analysis, Mitigation

What is Risk appetite?  

• The amount you are prepared to eat

• The amount of risk you are prepared to accept 

• The amount of risk you are prepared to tolerate

• Risk versus reward

What is the acronym we use for risk treatment processes?

• ALARP: As Low As Risk is Acceptable

• MATA: Mitigate, Assess, Tolerate, Avoid

• MENTAL: Mitigate, Endure, Negotiate, Transfer, Avoid, Litigate

• MATA: Manage, Avoid, Transfer, Accept 

The principle of reducing risk to ALARP means:

• Reduce risk to zero

• Accept risk that you cannot manage or transfer

• Avoid risk

• Reduce risk to as low as reasonably practicable i.e. acceptable level of risk at an acceptable cost