CSSLP · Question #196
Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?
The correct answer is B. Annualized Rate of Occurrence (ARO). Annualized Rate of Occurrence (ARO) is a key quantitative risk management metric that quantifies the expected frequency of a specific threat occurring within a single year. It helps in calculating the overall financial impact of risks.
Question
Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?
Options
- ASingle Loss Expectancy (SLE)
- BAnnualized Rate of Occurrence (ARO)
- CSafeguard
- DExposure Factor (EF)
How the community answered
(18 responses)- B94% (17)
- D6% (1)
Why each option
Annualized Rate of Occurrence (ARO) is a key quantitative risk management metric that quantifies the expected frequency of a specific threat occurring within a single year. It helps in calculating the overall financial impact of risks.
Single Loss Expectancy (SLE) represents the monetary loss expected each time a specific threat materializes, not the frequency of its occurrence.
Annualized Rate of Occurrence (ARO) specifically defines the estimated frequency, expressed as a decimal, that a particular risk event or threat is expected to occur within a one-year period.
A safeguard, also known as a control, is a protective measure implemented to reduce risk, not a metric representing the frequency of a threat.
Exposure Factor (EF) is a percentage representing the amount of an asset that is likely to be damaged or lost if a threat materializes, not the frequency of the threat itself.
Concept tested: Quantitative risk management - ARO
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf
Topics
Community Discussion
No community discussion yet for this question.