Unit 11: Risk Assessments

Which of the following are measures for risk probability?

• Very likely, likely, unlikely

• Low, medium, high, extreme

• Minor, moderate, major

• All the time, often, seldom

Which of the following are measures for risk impact?

• Very likely, likely, unlikely

• Low, medium, high, extreme

• Minor, moderate, major

• All the time, often, seldom

Which of the following are measures for risk severity?

• Very likely, likely, unlikely

• Low, medium, high, extreme

• Minor, moderate, major

• All the time, often, seldom

A risk is...

• a threat that could result in some form of loss at some point in time

• a strategy board game of diplomacy, conflict and conquest

• something bad that can happen to a computer network

• playing the national lottery

Probing a computer network / port scanning is an example of a risk that has...

• Minor impact

• Moderate impact

• Major impact

• Extreme impact

Hacking, viruses, or other malicious cyber activity such as a denial of service (DOS) are examples of attacks with a...

• Minor impact

• Moderate impact

• Major impact

• Extreme impact

What's wrong with this answer?

• Threat number too low.

• Threat title doesn't make sense.

• Potential size of loss should be just minor or just moderate.

• Probability is using a wrong key term.

What's wrong with this answer?

• Threat number too low.

• Threat title is not actually a threat.

• Severity should be extreme.

• Probability should be unlikely.

A risk that can affect all networks / IT systems is...

• generic

• implied

• specified

• random

A risk that is explicitly identified in the brief is...

• generic

• implied

• specified

• random