OG0-093 · Question #41
Which of the following best describes the meaning of "Initial Level of Risk" in Risk Management?
The correct answer is D. The categorization before determining and implementing mitigating actions. Initial Level of Risk refers to the intrinsic risk inherent in a system or process before any controls or mitigation strategies are applied to reduce it. It represents the raw risk exposure prior to treatment decisions.
Question
Which of the following best describes the meaning of "Initial Level of Risk" in Risk Management?
Options
- AThe categorization after implementation of mitigating actions
- BThe categorization after initial risk assessment
- CThe categorization after mitigation and residual risk assessment
- DThe categorization before determining and implementing mitigating actions
- EThe categorization before risk identification
How the community answered
(28 responses)- C4% (1)
- D93% (26)
- E4% (1)
Why each option
Initial Level of Risk refers to the intrinsic risk inherent in a system or process before any controls or mitigation strategies are applied to reduce it. It represents the raw risk exposure prior to treatment decisions.
This describes residual risk, which is the risk level remaining after controls or mitigating actions have been implemented.
While initial risk assessment is the process of identifying and analyzing risks, the 'initial level' specifically refers to the risk status *before* mitigation, making D more precise.
This explicitly defines residual risk, which is the risk left after mitigation and subsequent assessment.
The Initial Level of Risk, often referred to as inherent risk, represents the baseline risk associated with an activity or asset in the absence of any controls or risk-reducing measures. It is the categorization of risk before any decisions are made or actions are taken to mitigate it.
Risk identification is the preliminary step; a risk level cannot be categorized if the risk itself has not yet been identified.
Concept tested: Risk management - inherent vs. residual risk
Source: https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.