CGRC · Question #291
The implementation of the Assessment and the authorization process is an example of what type of risk response? Response:
The correct answer is D. Mitigate. Implementing assessment and authorization processes serves as a risk response strategy by actively reducing the likelihood or impact of potential risks.
Question
The implementation of the Assessment and the authorization process is an example of what type of risk response? Response:
Options
- ATransfer
- BRemediate
- CShare
- DMitigate
How the community answered
(30 responses)- A17% (5)
- B3% (1)
- C10% (3)
- D70% (21)
Why each option
Implementing assessment and authorization processes serves as a risk response strategy by actively reducing the likelihood or impact of potential risks.
Transferring risk involves shifting the risk to another party, such as through insurance, which is not what assessment and authorization processes primarily do.
Remediate often refers to fixing a specific vulnerability or deficiency after identification, whereas mitigation is a broader strategy including preventative and detective controls.
Sharing risk typically involves distributing the risk among multiple parties or entities, differing from the internal process of assessing and authorizing systems.
Mitigation involves implementing controls and processes to reduce the likelihood or impact of identified risks. The assessment process identifies vulnerabilities, and authorization ensures systems operate within an acceptable risk posture, thus actively reducing overall risk.
Concept tested: Risk response strategies - mitigation
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-39.pdf
Topics
Community Discussion
No community discussion yet for this question.