CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ76

Secure Software Lifecycle Management

Which of the following are the first steps needed to carry out a risk analysis process? Each correct answer represents part of the solution.

Choose three
  • A Valuations of the critical assets in hard costs.
  • B Evaluate potential threats to the assets.
  • C Estimate the potential losses to assets by determining their value.
  • D Establish the threats likelihood and regularity.
Explanation

Risk analysis evaluates risk from the potential impact to assets and the likelihood of a threat event. It therefore requires estimating potential asset losses or value, evaluating applicable threats, and establishing their likelihood and frequency. Asset valuation is not limited to hard costs because business impact can also include intangible effects such as reputation and mission impact.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!