Computer Security Applicationsintermediate
Arrange these actions in a sensible order when designing controls for an organizational risk.
Answer
Identify and prioritize the risk, Select controls that address the risk, Implement the selected controls, Monitor and review whether the controls remain effective
Explanation
### The order
1. **Identify and prioritize the risk**: This establishes what the organization needs to address.
2. **Select controls that address the risk**: Control choices should match the risk and requirements.
3. **Implement the selected controls**: A chosen safeguard must be put into operation.
4. **Monitor and review whether the controls remain effective**: Review checks whether the safeguards still work as expected.
### Terms
- **Control**: A safeguard used to reduce risk.
- **Implementation**: Putting a selected safeguard into operation.
### Remember
Assess first, select and implement next, then review.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free