CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ214

VerifiedSecure Software Concepts

Which of the following identifies residual risk as the risk that remains after risk mitigation has taken place?

Explanation

The DAA is the authority who formally accepts residual risk after mitigation measures have reduced risk to an acceptable level.

Community Discussion

No comments yet. Be the first to start the discussion!