CSSLP · Question #155
Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.
The correct answer is A. Identifying the risk B. Assessing the impact of potential threats D. Finding an economic balance between the impact of the risk and the cost of the countermeasure. The core goals of risk management involve systematically identifying risks, assessing the potential impact of threats, and finding a cost-effective balance between risk impact and the investment in countermeasures.
Question
Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.
Options
- AIdentifying the risk
- BAssessing the impact of potential threats
- CIdentifying the accused
- DFinding an economic balance between the impact of the risk and the cost of the countermeasure
How the community answered
(41 responses)- A90% (37)
- C10% (4)
Why each option
The core goals of risk management involve systematically identifying risks, assessing the potential impact of threats, and finding a cost-effective balance between risk impact and the investment in countermeasures.
A fundamental goal of risk management is to systematically identify and categorize all potential risks that could affect an organization's assets, operations, or mission.
Risk management aims to thoroughly assess the potential impact that identified threats could have on an organization if they were to exploit vulnerabilities.
"Identifying the accused" relates to incident response, forensics, or legal processes after a security event, not a primary goal of proactive risk management.
A key objective of risk management is to achieve an economic balance, ensuring that the cost of implementing security countermeasures is justifiable and proportionate to the potential impact and likelihood of the risks they mitigate.
Concept tested: Risk management goals
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf
Topics
Community Discussion
No community discussion yet for this question.