nerdexam
(ISC)2

CGRC · Question #9

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three. Response:

The correct answer is A. Finding an economic balance between the impact of the risk and the cost of the countermeasure B. Identifying the risk C. Assessing the impact of potential threats. The goals of risk management include identifying risks, assessing their potential impact, and finding an economic balance between the risk's impact and the cost of countermeasures.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three. Response:

Options

  • AFinding an economic balance between the impact of the risk and the cost of the countermeasure
  • BIdentifying the risk
  • CAssessing the impact of potential threats
  • DIdentifying the accused

How the community answered

(31 responses)
  • A
    90% (28)
  • D
    10% (3)

Why each option

The goals of risk management include identifying risks, assessing their potential impact, and finding an economic balance between the risk's impact and the cost of countermeasures.

AFinding an economic balance between the impact of the risk and the cost of the countermeasureCorrect

Finding an economic balance between the impact of the risk and the cost of the countermeasure is a primary goal of risk management, ensuring that security investments are cost-effective.

BIdentifying the riskCorrect

Identifying the risk is a fundamental and initial goal of risk management, as one cannot manage risks that have not been recognized.

CAssessing the impact of potential threatsCorrect

Assessing the impact of potential threats is a critical goal, as understanding the potential harm helps in prioritizing risks and determining appropriate responses.

DIdentifying the accused

Identifying the accused is part of incident response or forensic investigation, not a direct goal of proactive risk management which focuses on potential future events.

Concept tested: Goals of risk management

Source: https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/secure/security-governance-risk-compliance

Topics

#Risk Management Goals#Risk Identification#Risk Assessment#Cost-Benefit Analysis

Community Discussion

No community discussion yet for this question.

Full CGRC Practice