CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ265

Risk Assessment

The risk related to an asset prior to applying controls can be expressed as:

  • A the likelihood of a given threat.
  • B the magnitude of an impact.
  • C a function of the likelihood and impact.
  • D a function of the cost and effectiveness of controls.
Explanation

Inherent risk is assessed before controls are applied and is determined by the combination of an event’s likelihood and its potential impact.

Community Discussion

No comments yet. Be the first to start the discussion!