QuestionQ217

Risk Implementation Approach

In advanced risk assessment, risk response can be managed in the following ways:

Choose two
  • A Create multiple risk response tasks
  • B Skipped entirely based on attributes defined in the RAM
  • C Must create a mitigation response task
  • D Must create at least one risk response task
Explanation

A Risk Assessment Methodology (RAM) can enable the risk response-task workflow, allowing risk response tasks to be created and managed within an assessment. The RAM can also make risk response required never, always, or only under specified conditions; therefore, it can be skipped when the configured conditions do not require it. A mitigation task and a minimum of one response task are not universally mandatory.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!