CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ465

Risk Optimization

When creating a risk management process, which of the following should occur FIRST?

  • A Assess risk exposures.
  • B Identify threats.
  • C Identify assets.
  • D Determine the probability of occurrence.
Explanation

Risk management starts by identifying the assets that require protection. The threats, exposures, likelihood of occurrence, and resulting risk can only be evaluated meaningfully after the assets in scope have been identified.

Community Discussion

No comments yet. Be the first to start the discussion!