CGRC · Question #214
Which of the following statements are true about security risks? correct answer represents a complete solution. Choose three. Response:
The correct answer is B. They can be analyzed and measured by the risk analysis process. C. They can be mitigated by reviewing and taking responsible actions based on possible risks. D. They are considered an indicator of threats coupled with vulnerability. Security risks result from threats exploiting vulnerabilities, can be effectively analyzed and measured through a risk analysis process, and can be reduced through responsible mitigation actions. However, they cannot be entirely eliminated.
Question
Which of the following statements are true about security risks? correct answer represents a complete solution. Choose three. Response:
Options
- AThey can be removed completely by taking proper actions.
- BThey can be analyzed and measured by the risk analysis process.
- CThey can be mitigated by reviewing and taking responsible actions based on possible risks.
- DThey are considered an indicator of threats coupled with vulnerability.
How the community answered
(22 responses)- A5% (1)
- B95% (21)
Why each option
Security risks result from threats exploiting vulnerabilities, can be effectively analyzed and measured through a risk analysis process, and can be reduced through responsible mitigation actions. However, they cannot be entirely eliminated.
Security risks cannot be removed completely; they can only be managed, mitigated, transferred, or accepted, as achieving zero risk in complex systems is generally impossible.
The risk analysis process is specifically designed to identify, analyze, and measure security risks by evaluating the likelihood of threats exploiting vulnerabilities and the potential impact of such incidents.
Security risks can be mitigated by reviewing potential risks and implementing responsible actions or controls to reduce their likelihood or impact.
Security risks are fundamentally considered an indicator of the potential for loss or damage resulting from a threat attempting to exploit a specific vulnerability.
Concept tested: Characteristics of security risks
Source: https://www.nist.gov/itl/small-business-cybersecurity/guidance/identify-your-risks
Topics
Community Discussion
No community discussion yet for this question.