Which of the following relations correctly describes total risk?

The correct answer is A. Total Risk = Threats x Vulnerability x Asset Value. The standard information security risk formula is: Total Risk = Threats × Vulnerability × Asset Value. This formula reflects that risk is a function of the likelihood that a threat will exploit a vulnerability in an asset that has measurable value. The other choices incorrectly…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

ATotal Risk = Threats x Vulnerability x Asset Value
BTotal Risk = Viruses x Vulnerability x Asset Value
CTotal Risk = Threats x Exploit x Asset Value
DTotal Risk = Viruses x Exploit x Asset Value

How the community answered

(41 responses)

A
88% (36)
B
2% (1)
C
2% (1)
D
7% (3)

Explanation

The standard information security risk formula is: Total Risk = Threats × Vulnerability × Asset Value. This formula reflects that risk is a function of the likelihood that a threat will exploit a vulnerability in an asset that has measurable value. The other choices incorrectly substitute 'Viruses' (a subset of threats, not a replacement) or 'Exploit' (an action, not a standalone variable in the formula) for the correct terms.

Topics

#Risk Management#Risk Calculation#Threats#Vulnerability

Community Discussion

No community discussion yet for this question.

Full CAP Practice