CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ2

VerifiedSecure Software Lifecycle Management

The LeGrand Vulnerability-Oriented Risk Management method relies on vulnerability analysis and has four principal steps. Which of the following processes are included in the risk assessment step? Each correct answer represents part of the solution. Choose all that apply.

Choose two
Explanation

In VORAM, risk assessment establishes the relevant vulnerabilities and assesses the attacks that may exploit them. Selecting countermeasures through cost-benefit analysis and remediating a specific vulnerability are follow-on risk-treatment activities.

Community Discussion

No comments yet. Be the first to start the discussion!