CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ91

VerifiedGovernance, Risk, and Compliance (GRC)

Which of the following are the initial steps needed to carry out a risk analysis process? Each correct answer represents part of the solution.

Choose three
Explanation

Initial risk analysis activities include determining asset value and potential loss, identifying potential threats to those assets, and estimating the likelihood and frequency of those threats. Asset valuation is not restricted to hard costs alone.

Community Discussion

No comments yet. Be the first to start the discussion!