Risk Management

What is the primary focus of risk management?

• Identifying threats

• Controlling risks

• Evaluating assets

• Assessing vulnerabilities

Which term describes a flaw or weakness in system security?

• Asset

• Vulnerability

• Risk

• Threat

What is the first step in the risk management process?

• Risk evaluation

• Risk identification

• Risk control

• Risk assessment

What does a business continuity plan aim to achieve?

• Assess risk levels

• Keep the organization operating during an unplanned event

• Prevent all risks

• Identify all vulnerabilities

Which of the following is NOT a common method of the 'defend' strategy?

• Training and education

• Outsourcing

• Applying technology

• Application of policy

What is the purpose of a disaster recovery plan?

• To identify risks

• To keep the organization running

• To define actions during an incident

• To assess vulnerabilities

In risk management, what does the term 'transfer' refer to?

• Shifting risk to other assets

• Accepting the risk

• Avoiding business activities

• Mitigating the risk

Which of the following strategies involves doing nothing to protect a vulnerability?

• Defend

• Accept

• Transfer

• Mitigate

What is the main goal of risk assessment?

• To evaluate risk control strategies

• To implement security policies

• To analyze the likelihood and consequences of risks

• To identify all assets

What should be done after identifying risks in the risk management process?

• Evaluate the risks

• Implement controls

• Monitor the risks

• Communicate with stakeholders