What are components of a comprehensive risk management process? (Choose two)

The correct answer is B. Risk mitigation D. Risk assessment. Risk assessment (D) and risk mitigation (B) are two foundational components of any comprehensive risk management process - you must first identify and evaluate risks (assessment), then take action to reduce or eliminate them (mitigation). Options A and C describe poor practices…

Security Principles

Question

Options

AUsing outdated tools
BRisk mitigation
CIgnoring minor risks
DRisk assessment

How the community answered

(66 responses)

A
8% (5)
B
88% (58)
C
5% (3)

Explanation

Risk assessment (D) and risk mitigation (B) are two foundational components of any comprehensive risk management process - you must first identify and evaluate risks (assessment), then take action to reduce or eliminate them (mitigation). Options A and C describe poor practices that directly undermine risk management: using outdated tools compromises accuracy, and ignoring minor risks allows small issues to escalate into larger ones. A solid risk management process is proactive and thorough, not selective or negligent.

Memory tip: Think "A.I.M." - Assess the risk, Implement mitigations - the two correct answers map directly to these two steps. If an answer choice describes avoiding or degrading the process (outdated tools, ignoring risks), it's automatically wrong.

Topics

#Risk Management#Risk Assessment#Risk Mitigation#Risk Process

Community Discussion

No community discussion yet for this question.

Full 100-160 Practice