DataPrivacy-reviewerprefi

What is the primary objective of a risk assessment process?

• To eliminate all risks completely

• To implement random security controls

• To determine an appropriate budget for security and implement controls within that budget

• To ensure legal compliance only

What does a risk assessment estimate to meet its objectives?

• The total cost of all assets

• Potential cost of breaches and likelihood of breaches

• Number of employees exposed to threats

• Total number of threats in a system

What is an asset in the context of risk assessment?

• A security measure to prevent breaches

• An item of value critical to achieving business objectives

• A tool used to attack a system

• A liability in the financial statement

Which of the following defines a threat?

• A vulnerability in a system

• Any circumstance that could impact operations or assets adversely

• A safeguard against risks

• A type of attack

The term that refers to the measure of damage a threat can cause is called what?

• Threat strength

• Threat severity

• Likelihood

• Impact

What does threat strength refer to?

• The probability of an event occurring

• The force a threat agent can apply against an asset

• The severity of damage caused by an event

• The number of attacks in a year

What does threat event frequency indicate?

• The likelihood of a threat agent acting within a given time frame

• The duration of an attack

• The amount of data stolen during an attack

• The cost of a breach

What is a vulnerability in the context of information systems?

• A preventive security measure

• A weakness that can be exploited by a threat source

• The magnitude of potential harm

• A random system flaw

What is a security control?

• A threat mitigation plan

• A safeguard designed to protect system confidentiality, integrity, and availability

• A policy document

• An untested countermeasure

The harm caused by unauthorized access, modification, or destruction of information is referred to as what?

• Threat severity

• Impact

• Likelihood

• Risk