nerdexam
(ISC)2

CSSLP · Question #155

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

The correct answer is A. Identifying the risk B. Assessing the impact of potential threats D. Finding an economic balance between the impact of the risk and the cost of the countermeasure. The core goals of risk management involve systematically identifying risks, assessing the potential impact of threats, and finding a cost-effective balance between risk impact and the investment in countermeasures.

Secure Software Concepts

Question

Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.

Options

  • AIdentifying the risk
  • BAssessing the impact of potential threats
  • CIdentifying the accused
  • DFinding an economic balance between the impact of the risk and the cost of the countermeasure

How the community answered

(41 responses)
  • A
    90% (37)
  • C
    10% (4)

Why each option

The core goals of risk management involve systematically identifying risks, assessing the potential impact of threats, and finding a cost-effective balance between risk impact and the investment in countermeasures.

AIdentifying the riskCorrect

A fundamental goal of risk management is to systematically identify and categorize all potential risks that could affect an organization's assets, operations, or mission.

BAssessing the impact of potential threatsCorrect

Risk management aims to thoroughly assess the potential impact that identified threats could have on an organization if they were to exploit vulnerabilities.

CIdentifying the accused

"Identifying the accused" relates to incident response, forensics, or legal processes after a security event, not a primary goal of proactive risk management.

DFinding an economic balance between the impact of the risk and the cost of the countermeasureCorrect

A key objective of risk management is to achieve an economic balance, ensuring that the cost of implementing security countermeasures is justifiable and proportionate to the potential impact and likelihood of the risks they mitigate.

Concept tested: Risk management goals

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#Risk Management Goals#Risk Identification#Risk Assessment#Countermeasure Selection

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice