CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ174

VerifiedSecurity and Risk Management

During the change management process, which of the following is used to identify and document new risks?

Explanation

A risk assessment is used to identify and evaluate risks introduced by a proposed change. Any identified risks can subsequently be entered in the risk register for ongoing tracking and response planning.

Community Discussion

No comments yet. Be the first to start the discussion!