CAS-005: CompTIA SecurityX

By CompTIA · Question Mode

QuestionQ57

Governance, Risk, and Compliance

A compliance manager is preparing an engagement to identify risks in the environment. The manager wants to speak with business-unit leaders about key engagement considerations, including identifying critical assets and processes and potential points of failure. Which of the following is most relevant to consider during these discussions?

Explanation

Risk appetite and tolerance define the level and types of risk the organization is willing to accept and the amount of disruption it can withstand. They provide the business context needed to identify which assets and processes are critical and which potential failures are significant.

Community Discussion

No comments yet. Be the first to start the discussion!