CGRC · Question #9
Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three. Response:
The correct answer is A. Finding an economic balance between the impact of the risk and the cost of the countermeasure B. Identifying the risk C. Assessing the impact of potential threats. The goals of risk management include identifying risks, assessing their potential impact, and finding an economic balance between the risk's impact and the cost of countermeasures.
Question
Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three. Response:
Options
- AFinding an economic balance between the impact of the risk and the cost of the countermeasure
- BIdentifying the risk
- CAssessing the impact of potential threats
- DIdentifying the accused
How the community answered
(31 responses)- A90% (28)
- D10% (3)
Why each option
The goals of risk management include identifying risks, assessing their potential impact, and finding an economic balance between the risk's impact and the cost of countermeasures.
Finding an economic balance between the impact of the risk and the cost of the countermeasure is a primary goal of risk management, ensuring that security investments are cost-effective.
Identifying the risk is a fundamental and initial goal of risk management, as one cannot manage risks that have not been recognized.
Assessing the impact of potential threats is a critical goal, as understanding the potential harm helps in prioritizing risks and determining appropriate responses.
Identifying the accused is part of incident response or forensic investigation, not a direct goal of proactive risk management which focuses on potential future events.
Concept tested: Goals of risk management
Source: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/secure/security-governance-risk-compliance
Topics
Community Discussion
No community discussion yet for this question.