Erstellt von Lyndsay Badding
vor mehr als ein Jahr
|
||
Frage | Antworten |
Phase 1 | identify mission essential functions |
Phase 2 | identify vulnerabilities |
Phase 3 | identify threats |
Phase 4 | analyze business impacts |
Phase 5 | identify risk response |
Acceptance | assigning no security control due to high cost, asset's value isn't high enough, or the sec control will cause undue delay |
Transference | assigning a risk to a third party |
Avoidance | stop doing a risky activity |
Mitigation (Remediation) | reducing exposure to risk factors |
Risk Reduction | set of controls that reduces the likelihood or cost of a risk being realized |
Risk Register | a document showing risk assessment results these appear in exec briefings and IRP sessions |
Möchten Sie mit GoConqr kostenlos Ihre eigenen Karteikarten erstellen? Mehr erfahren.