SSCP · Question #1182
Risk assessment deals with constant monitoring?
The correct answer is B. False. While risk management involves ongoing monitoring, risk assessment is a periodic process of identifying and analyzing risks, distinct from the continuous nature of monitoring.
Question
Risk assessment deals with constant monitoring?
Options
- ATrue
- BFalse
How the community answered
(25 responses)- A12% (3)
- B88% (22)
Why each option
While risk management involves ongoing monitoring, risk *assessment* is a periodic process of identifying and analyzing risks, distinct from the continuous nature of monitoring.
Risk assessment is a snapshot in time or a periodic evaluation, not a continuous activity; constant monitoring is a separate, ongoing phase of risk management.
Risk assessment is a distinct process of identifying, analyzing, and evaluating risks, typically performed periodically or when significant changes occur, whereas constant monitoring is part of ongoing risk *management* or *risk treatment*, which follows the assessment phase.
Concept tested: Risk assessment vs. risk monitoring
Source: https://learn.microsoft.com/en-us/azure/compliance/security-risk-assessment
Topics
Community Discussion
No community discussion yet for this question.