CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ173

VerifiedSecurity and Risk Management

An organization is defining the scope of a security assessment to develop a Security Management Program (SMP). The next step is to choose an approach for performing the risk assessment. Which of the following approaches is MOST effective for the SMP?

Explanation

A business-process-based risk assessment aligns risk identification and treatment with business goals, enabling the Security Management Program to prioritize safeguards according to their effect on organizational objectives and operations.

Community Discussion

No comments yet. Be the first to start the discussion!