Unit 3 3.1 Cyber Security risk management

Risk management means removing all risks.

• True

• False

Risk management involves....

a) Audit & adjust the risk management process

b) Monitoring & reporting the risk

c) Control the risk

d) Identifying the risk

e) Measuring the risk

What is the correct order?

• a,b,c,d,e

• d,e,b,a,c

• d,e,b,c,a

• b,c,d,e,a

Which two things are involved when monitoring a risk?

• How likely is it?

• Encryption.

• Eradicating the risk.

• How serious would the effects be?

Within the area of risk management of computer systems and networks there are a range of assets. Which of the following is not classed as an asset?

• Hardware

• Software

• Stakeholders

• Communications devices

• Data

Which of the following is not classed as a hardware resource?

• Servers

• Laptops

• Printers

• Scanners

• Data

Which of the following is not classed as a software resource?

• Databases

• Laptops

• CAD packages

• Bespoke programs

• Spreadsheets

Which of the following is not classed as a communications device?

• Telephone system

• Routers

• Cabling

• Bespoke software

• Modems

Which of the following is not classed as data or information?

• Telephone system

• Customer details

• Sales figures

• Financial reports

• Employee details

The value of each asset must be calculated because risk management costs money and organisations cannot afford to put in place protection that is going to cost more than the value of the asset.

• True

• False

A back door or trap door is a method by which a programmer or network manager bypasses the normal security procedures.

• True

• False