CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ171

VerifiedGovernance, Risk, and Compliance (GRC)

Which risk-management term represents the estimated frequency with which a threat is expected to occur?

Explanation

Annualized Rate of Occurrence (ARO) expresses the expected frequency of a threat event over one year. It is used with Single Loss Expectancy (SLE) to calculate Annualized Loss Expectancy (ALE).

Community Discussion

No comments yet. Be the first to start the discussion!