CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ626

Information Security Risk Management

Threat and vulnerability assessments are important primarily because they are:

  • A used to establish security investments.
  • B needed to estimate risk.
  • C the basis for setting control objectives.
  • D elements of the organization's security posture.
Explanation

Threat and vulnerability assessments identify the conditions needed to evaluate the likelihood and impact of harmful events, which is necessary to estimate risk.

Community Discussion

No comments yet. Be the first to start the discussion!