CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

Question

Which of the following constitute the major tasks of risk management? Each correct answer represents a complete solution.

Choose two

A Assuring the integrity of organizational data
B Building Risk free systems
C Risk control
D Risk identification

Explanation

Major risk-management activities include risk identification—recognizing and assessing potential threats—and risk control, which applies measures to reduce, transfer, avoid, or otherwise manage risk. No system can be made entirely risk-free, and data integrity is a specific security objective rather than a general risk-management task.

CISSP-ISSMP: Information Systems Security Management ProfessionalDemo

AstroTutor

Notes

Readiness

QuestionQ86

Community Discussion