CGEIT · Question #348
An enterprise has identified potential environmental disasters that could occur in the area where its data center is located. Which of the following should be done NEXT?
The correct answer is B. Assess the likelihood and impact on the data center. After identifying potential environmental disasters, the next crucial step is to assess the likelihood of these events occurring and their potential impact on the data center.
Question
An enterprise has identified potential environmental disasters that could occur in the area where its data center is located. Which of the following should be done NEXT?
Options
- AImplement an early warning detection and notification system.
- BAssess the likelihood and impact on the data center.
- CRelocate the data center to minimize the threat.
- DAssess how the data center is protected against the threat.
How the community answered
(30 responses)- A10% (3)
- B80% (24)
- C7% (2)
- D3% (1)
Why each option
After identifying potential environmental disasters, the next crucial step is to assess the likelihood of these events occurring and their potential impact on the data center.
Implementing an early warning system is a mitigation strategy that should only be pursued after a thorough risk assessment justifies its necessity and identifies specific requirements.
Following the identification of a threat, a comprehensive risk assessment is essential to quantify the potential danger by evaluating both the probability of the disaster occurring and the severity of its impact on the data center's operations and assets. This assessment provides critical information for prioritizing and planning effective mitigation strategies.
Relocating the data center is a costly and drastic mitigation measure that would only be considered after a detailed risk assessment demonstrates the unacceptably high risks of the current location.
Assessing existing protections is part of understanding the current risk posture, but a full likelihood and impact assessment provides a more complete picture of the overall risk before deciding on further actions.
Concept tested: Risk assessment after threat identification
Topics
Community Discussion
No community discussion yet for this question.