CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ53

VerifiedRisk Management

Lisa is the project manager for her company’s SQL project. She has finished risk response planning with her project team and is ready to update the risk register to reflect those responses. Which statement best describes the level of detail Lisa should include for the risk responses she has created?

Explanation

The detail of a risk response should be commensurate with the risk’s priority. Risks with greater probability and/or impact receive higher priority and require more thorough response planning, whereas lower-priority risks may need less detailed responses. A risk register records planned responses for identified risks.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!