QuestionQ22
Security Operations and ManagementLisa Carter, a SOC analyst at a financial services firm, is conducting a risk assessment after a series of suspicious alerts were detected by the SIEM (Security Information and Event Management) system. Her task is to assess the risk of a possible data breach in order to prioritize incident-response efforts.
She evaluates three key factors: the likelihood that an attack will succeed based on current threat intelligence, the impact on critical business operations if the breach occurs, and the value of the targeted assets (for example, customer data and financial systems). Using the standard risk assessment formula, which of the following scenarios represents the highest risk to the organization?
- A Low Likelihood, High Impact, Low Asset Value
- B High Likelihood, High Impact, High Asset Value
- C Low Likelihood, Low Impact, High Asset Value
- D High Likelihood, Low Impact, High Asset Value
Community Discussion