An organization that develops military technology is considering expansion into a foreign country. The organization's owners want to understand the risks associated with such an expansion, and the…

The correct answer is B. Tabletop assessment. A tabletop assessment is a low-cost, discussion-based exercise in which stakeholders walk through hypothetical scenarios (in this case, risks of foreign expansion - political, legal, regulatory, competitive) without deploying technical tools or performing active testing. It is…

Risk Management

Question

An organization that develops military technology is considering expansion into a foreign country. The organization's owners want to understand the risks associated with such an expansion, and the organization does not want to fund an intensive assessment. Which of the following approaches should be taken?

Options

APenetration test
BTabletop assessment
CCompliance assessment
DConfiguration security test

How the community answered

(26 responses)

B
96% (25)
C
4% (1)

Explanation

A tabletop assessment is a low-cost, discussion-based exercise in which stakeholders walk through hypothetical scenarios (in this case, risks of foreign expansion - political, legal, regulatory, competitive) without deploying technical tools or performing active testing. It is ideal when an organization wants to understand and discuss risks without funding an intensive assessment. A penetration test (A) is technically intensive and expensive. A compliance assessment (C) checks adherence to specific standards and would not broadly evaluate geopolitical or business risks. A configuration security test (D) is technical and scoped to IT configurations. The tabletop format is the right fit for strategic risk discussion at minimal cost.

Topics

#tabletop assessment#risk assessment#international expansion#threat analysis

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice