CISSP Security Risk Management
What is the first step in the risk management process?
Risk identification
What is the goal of risk management?
To reduce risks to an acceptable level
Which risk management technique involves avoiding the risk entirely?
Risk avoidance
What is the difference between a threat and a vulnerability?
Threats are potential harm, vulnerabilities are weaknesses
Which risk management step determines the likelihood and impact of risks?
Risk assessment
What is the purpose of risk response planning?
To address risks appropriately
Which risk management strategy involves sharing the risk with another party?
Risk transfer
What is the purpose of a risk register?
To track and manage risks
Which factor is NOT considered when assessing risks?
Budget
What is the final step in the risk management process?
Risk monitoring and review