GSLC · Question #370
Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.
The correct answer is A. Identifying the risk B. Finding an economic balance between the impact of the risk and the cost of the countermeasure D. Assessing the impact of potential threats. Risk management aims to identify risks, assess their impact, and balance that impact against the cost of countermeasures - not to identify individuals accused of wrongdoing.
Question
Which of the following are the goals of risk management? Each correct answer represents a complete solution. Choose three.
Options
- AIdentifying the risk
- BFinding an economic balance between the impact of the risk and the cost of the countermeasure
- CIdentifying the accused
- DAssessing the impact of potential threats
How the community answered
(28 responses)- A93% (26)
- C7% (2)
Why each option
Risk management aims to identify risks, assess their impact, and balance that impact against the cost of countermeasures - not to identify individuals accused of wrongdoing.
Identifying the risk is the foundational first step of risk management, establishing what threats or vulnerabilities exist.
Finding an economic balance ensures that the cost of a countermeasure does not exceed the value of the asset or the potential loss, making risk treatment financially justifiable.
Identifying the accused is a concept from criminal investigation or legal proceedings, not from risk management methodology.
Assessing the impact of potential threats quantifies the severity and likelihood of harm, which drives prioritization of risk responses.
Concept tested: Core goals of IT risk management
Source: https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.