Risk Identification

The video tutorial covers the process of risk identification by first identifying assets within an organization. It distinguishes between primary and supporting assets, emphasizing the importance of business processes and information assets. The tutorial explains the concept of asset ownership, highlighting the roles of owners and custodians. Finally, it discusses how organizations can assess the value of their assets, using a scale to determine their importance.

What is the primary focus when starting a risk management exercise?

• Assessing employee performance

• Identifying potential threats

• Identifying assets

• Evaluating financial losses

Which of the following is considered a primary asset?

• Staff on site

• Organization structure

• Business processes

• Computer network

Who is ultimately responsible for an asset, even if its management is delegated?

• The sales manager

• The asset owner

• The IT manager

• The custodian

In the context of shared assets, what is a recommended practice?

• Assigning a single person for each server

• Designating a person responsible for shared service delivery

• Ignoring shared assets in risk management

• Allowing multiple owners for a single asset

How should an organization determine the value of its assets?

• Using a fixed scale for all organizations

• Based on industry standards

• According to its own parameters

• By consulting external auditors