CGEIT: Certified in the Governance of Enterprise ITDemo

Question

An enterprise has identified potential environmental disasters that could occur in the area where its data center is situated. Which of the following should be done NEXT?

A Assess how the data center is protected against the threat
B Implement an early warning detection and notification system
C Relocate the data center to minimize the threat
D Assess the likelihood and impact on the data center

Explanation

Risk is evaluated from the likelihood that a threat event will occur and the adverse impact it would cause. Assessing those factors establishes the risk level needed to prioritize and select proportionate protections or other treatments.

Learn more

NIST SP 800-30 Rev. 1, Guide for Conducting Risk Assessments

CGEIT: Certified in the Governance of Enterprise ITDemo

AstroTutor

Notes

Readiness

QuestionQ450

Community Discussion