12.0 Risk Management Processes

What is the cyclical process of identifying, assessing, analyzing, and responding to risks?

• Risk management

• Risk exemption

• Risk acceptance

• Risk deterrence

Which activity identifies organizational risks and determines their effect on mission-critical operations?

• Mission essential function (MEF)

• Business impact analysis (BIA)

• Risk mitigation

• Risk exception

What metric predicts the expected time between failures for a device or component?

• Mean time to repair (MTTR)

• Maximum tolerable downtime (MTD)

• Mean time between failures (MTBF)

• Risk acceptance

What metric represents the average time taken for a device to be repaired or replaced after a failure?

• Mean time to repair (MTTR)

• Recovery time objective (RTO)

• Risk identification

• Risk mitigation

What is the process of listing sources of risk due to threats and vulnerabilities?

• Risk mitigation

• Risk identification

• Risk acceptance

• Risk exception

What is the response of reducing risk to fit within an organization's willingness to accept risk?

• Risk deterrence

• Risk mitigation

• Risk exemption

• Risk acceptance

What category of risk management uses alternate mitigating controls to control an accepted risk factor?

• Risk exemption

• Risk exception

• Risk deterrence

• Risk identification

What is the risk that remains even after controls are put into place?

• Residual risk

• Risk acceptance

• Risk deterrence

• Risk exemption

What term describes the severity of a risk if realized by factors such as the scope, value of the asset, or financial impacts?

• Probability

• Impact

• Risk owner

• Inherent risk

What is the comprehensive process of evaluating, measuring, and mitigating the many risks that pervade an organization?

• Risk assessment

• Enterprise risk management (ERM)

• Qualitative risk analysis

• Heat map risk matrix