Risk Assessment

___ is the process of examining an organization current information technology security situation

• Risk Control

• Risk Assessment

• Risk Identification

Which of the following is true about risk management? select more than one

• it is a cyclical process

• a waterfall process

• a process to recognise threats, impacts to organizations resources and come up with risk controls

• a process to eliminate threats from an organization

Which of the followings are components of risk management? Select more than 1

• Risk Control

• Risk Assessment

• Risk Mitigation

• Risk Idenfitication

Which of the following is NOT a process in Risk Identification?

• Identify and Inventory Threats

• Classify and Prioritize Assets

• Identify and Inventory Assets

• Identify and Prioritize Threats

Which of the following statement is true?

• We need to establish organizations context before performing Risk Assessment

• We need to perform risk acceptance before performing risk treatment

• Risk communication involves setting the objectives and policies

• Risk acceptance is a part of Risk Analysis

Which of the following are components in risk identification?

• Assets, Liability and Procedure

• Process, Data and Service

• People, Procedure and Data

• Software, Policies and Procedures

What is the importance of asset identification?

• to help in selection of risk control methods

• to identify threats in each asset

• to ensure the organizations profitability

• to find out the significance of each asset towards the organization

Which of the following are attributes of People?

• Manager's ID, office address, IP address

• user ID, security clearance, skillset

• MAC address, IP address, ID

• security clearance, security labels, address

What is the importance of asset valuation? select more than 1

• to determine the asset that contributes to company's success

• to determine the threats towards that asset

• to find out which asset generates most profit

• to find out which asset is most expensive to replace

What are the methods to perform asset valuation? select more than 1

• Information Asset worksheet

• Risk Register

• Ranked vulnerability risk worksheet

• weighted factor analysis