CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following represents a risk practitioner’s BEST recommendation for addressing an organization’s need to secure multiple systems with limited IT resources?

A Perform a vulnerability analysis.
B Schedule a penetration test.
C Apply available security patches.
D Conduct a business impact analysis (BIA).

Explanation

A business impact analysis (BIA) identifies the operational and financial consequences of system disruption and establishes system criticality. That information enables limited security resources to be prioritized toward the systems whose compromise or outage would have the greatest business impact.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ388

Community Discussion