Computer Security Applicationsadvanced
Why should an organization reassess cybersecurity risks instead of treating a completed assessment as permanent?
Answer
Threats, vulnerabilities, technology, assets, controls, and organizational conditions can change. Reassessment checks whether prior priorities and safeguards remain suitable and identifies new risks that require treatment.
Explanation
### The concept
A risk assessment describes conditions at a particular time. New systems, changed business needs, new threats, or altered vulnerabilities can change the likelihood or impact of an event. Existing safeguards may also become ineffective or insufficient. Reassessment lets the organization update priorities and treatment decisions rather than relying on outdated assumptions.
### What a good answer covers
- Threats and organizational conditions change.
- Assets, vulnerabilities, and controls may also change.
- Review updates priorities and treatment decisions.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free