Risk Management Quiz

What is the primary responsibility of upper management in an organization regarding information security?

• To conduct risk assessments

• To oversee and support IT functions

• To implement technical controls

• To manage day-to-day operations

Henry is studying risk management for his business class. He learns about various strategies to handle risks. Which of the following is NOT a major undertaking in risk management?

• Risk control

• Risk elimination

• Risk assessment

• Risk identification

Avery is working on a project for her business class where she needs to manage potential risks. What is the first step in the risk management process?

• Risk assessment

• Risk control

• Risk identification

• Risk mitigation

What type of information is classified as 'Confidential'?

• Information that can be shared freely

• Sensitive corporate information

• Internal information for employees

• Information for public release

Michael is managing a project and needs to decide how to handle potential risks. Which of the following is a method of risk control?

• All of the above

• Mitigation

• Acceptance

• Transference

What does the clean desk policy aim to enforce in Isla's office?

• Secure storage of classified information

• Regular backups of data

• Access control to sensitive areas

• Employee training on security

What is the purpose of asset valuation in risk management?

• To classify information assets

• To identify potential threats

• To assign financial value to information assets

• To determine the cost of insurance

In risk assessment, what does 'Loss Frequency' refer to?

• The total value of assets

• The probability of an attack occurring

• The cost of implementing controls

• The number of successful attacks

Anika is considering purchasing insurance for her new car to protect against potential accidents. Which risk control strategy involves shifting risk to another party?

• Mitigation

• Transference

• Defense

• Termination

What is the main goal of a disaster recovery plan?

• To ensure business continuity after a disaster

• To prevent data breaches

• To assess risk likelihood

• To classify information assets