SSCP · Question #463
Which of the following is NOT a part of a risk analysis?
The correct answer is D. Choose the best countermeasure. Risk analysis encompasses identifying risks (A), quantifying the impact of threats (B), and providing an economic balance between risk impact and countermeasure cost (C). 'Choosing the best countermeasure' (D) is part of risk management or risk treatment - the step that follows…
Question
Options
- AIdentify risks
- BQuantify the impact of potential threats
- CProvide an economic balance between the impact of the risk and the cost of the associated
- DChoose the best countermeasure
How the community answered
(62 responses)- A5% (3)
- B3% (2)
- C2% (1)
- D90% (56)
Explanation
Risk analysis encompasses identifying risks (A), quantifying the impact of threats (B), and providing an economic balance between risk impact and countermeasure cost (C). 'Choosing the best countermeasure' (D) is part of risk management or risk treatment - the step that follows risk analysis. Risk analysis is about understanding and measuring risk; selecting and implementing controls is a management decision that comes after analysis is complete.
Topics
Community Discussion
No community discussion yet for this question.