GSLC: GIAC Security LeadershipDemo

Question

How should Learning Objectives be created with respect to an organization’s managed risks?

A A single learning objective document should be developed to address company goals for all managed risks
B A learning objective document should be developed for each department listing their managed risks
C An individual learning objective document should be developed for each managed risk
D A learning objective document should be developed for each threat agent that poses a risk

Explanation

Learning objectives should be defined separately for each managed risk so that the required learner knowledge or behavior directly supports treatment of that specific risk. Department-wide, company-wide, and threat-agent-based documents do not maintain that direct risk-to-objective traceability.

GSLC: GIAC Security LeadershipDemo

AstroTutor

Notes

Readiness

QuestionQ10

Community Discussion