nerdexam
Isaca

CGEIT · Question #348

An enterprise has identified potential environmental disasters that could occur in the area where its data center is located. Which of the following should be done NEXT?

The correct answer is B. Assess the likelihood and impact on the data center. After identifying potential environmental disasters, the next crucial step is to assess the likelihood of these events occurring and their potential impact on the data center.

Submitted by diego_uy· Apr 18, 2026Risk Optimization

Question

An enterprise has identified potential environmental disasters that could occur in the area where its data center is located. Which of the following should be done NEXT?

Options

  • AImplement an early warning detection and notification system.
  • BAssess the likelihood and impact on the data center.
  • CRelocate the data center to minimize the threat.
  • DAssess how the data center is protected against the threat.

How the community answered

(30 responses)
  • A
    10% (3)
  • B
    80% (24)
  • C
    7% (2)
  • D
    3% (1)

Why each option

After identifying potential environmental disasters, the next crucial step is to assess the likelihood of these events occurring and their potential impact on the data center.

AImplement an early warning detection and notification system.

Implementing an early warning system is a mitigation strategy that should only be pursued after a thorough risk assessment justifies its necessity and identifies specific requirements.

BAssess the likelihood and impact on the data center.Correct

Following the identification of a threat, a comprehensive risk assessment is essential to quantify the potential danger by evaluating both the probability of the disaster occurring and the severity of its impact on the data center's operations and assets. This assessment provides critical information for prioritizing and planning effective mitigation strategies.

CRelocate the data center to minimize the threat.

Relocating the data center is a costly and drastic mitigation measure that would only be considered after a detailed risk assessment demonstrates the unacceptably high risks of the current location.

DAssess how the data center is protected against the threat.

Assessing existing protections is part of understanding the current risk posture, but a full likelihood and impact assessment provides a more complete picture of the overall risk before deciding on further actions.

Concept tested: Risk assessment after threat identification

Topics

#Risk Management#Risk Assessment#Disaster Recovery Planning#Threat Analysis

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice