Cybersecurity Risk Assessment Methodologies Quiz

What is the primary focus of Quantitative Risk Assessment?

• Following a structured six-step process

• Assigning numerical values to risk components

• Using subjective scales to evaluate risks

• Combining qualitative and quantitative methods

Which metric is used to calculate potential monetary loss in Quantitative Risk Assessment?

• Annual Loss Expectancy (ALE)

• Control effectiveness

• Return on Security Investment (ROSI)

• Threat likelihood

Tags

CCSS.HSS.MD.B.6

CCSS.HSS.MD.B.7

What does the NIST Risk Management Framework (RMF) NOT include?

• Monitoring controls

• Developing treatment plans

• Implementing controls

• Categorizing information systems

Which framework is specifically designed for quantifying cyber risk in financial terms?

• FAIR

• NIST RMF

• Hybrid Approaches

• ISO 27005

What is a characteristic of Qualitative Risk Assessment?

• Focuses on financial quantification

• Assigns numerical values to risk components

• Uses a structured six-step process

• Relies on expert judgment

Which of the following would be a good source of information about the retroactive risks of Korey's new startup?

• environmental scan.

• purchasing manager.

• business incident log.

• local weather forecast.

Answer explanation

The correct choice for a good source of information about the retroactive risks of a business is the business incident log, as it records past incidents and can help identify patterns and potential risks.