QuestionQ22

Security Operations and Management

Lisa Carter, a SOC analyst at a financial services firm, is conducting a risk assessment after a series of suspicious alerts were detected by the SIEM (Security Information and Event Management) system. Her task is to assess the risk of a possible data breach in order to prioritize incident-response efforts.

She evaluates three key factors: the likelihood that an attack will succeed based on current threat intelligence, the impact on critical business operations if the breach occurs, and the value of the targeted assets (for example, customer data and financial systems). Using the standard risk assessment formula, which of the following scenarios represents the highest risk to the organization?

  • A Low Likelihood, High Impact, Low Asset Value
  • B High Likelihood, High Impact, High Asset Value
  • C Low Likelihood, Low Impact, High Asset Value
  • D High Likelihood, Low Impact, High Asset Value
Explanation

Risk is greatest when the likelihood of a successful attack, the potential business impact, and the value of the affected assets are all high. This combination maximizes the expected severity and priority of the incident.

Community Discussion

No comments yet. Be the first to start the discussion!