QuestionQ27

VerifiedGovernance, Safety & Risk Management

You are conducting a risk assessment for a planned Claude-based deployment and must finish the inventory steps before evaluating threats against assets.

Which two actions must be completed before assessing threats against assets to estimate likelihood and impact? Each correct answer represents part of the solution. (Select two.)

Choose two
Explanation

Risk likelihood and impact can be estimated only after identifying the assets affected by the deployment and their sensitivity, then identifying the relevant threat actors and attack vectors. Asset sensitivity establishes the potential consequence of compromise, while threat actors and vectors define the plausible threat scenarios. Mitigation recommendations, residual-risk acceptance, and outcome documentation follow the analysis.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!