Computer Security Applicationsadvanced
An organization has limited resources and identifies several risks with different likelihoods and impacts. Explain how assessment findings should guide its next decisions.
Answer
The organization should compare likelihood and impact, consider existing safeguards, and prioritize the risks that could cause the greatest concern. It should select treatment options and controls suited to those risks, document the rationale, and review the decisions when conditions change. Assessment does not imply that every risk can be eliminated.
Explanation
### What a good answer covers
- Compares likelihood and impact to establish relative priority.
- Considers how existing controls affect the remaining exposure.
- Selects treatment and safeguards in response to prioritized risks.
- Documents decisions so they can be reviewed and explained.
- Recognizes that risk management reduces exposure but cannot guarantee zero risk.
### Terms
- **Likelihood**: An estimate of how probable an event is.
- **Impact**: The harm or consequence if an event occurs.
- **Residual risk**: Risk that remains after safeguards are considered.
### Remember
Prioritize by risk, then choose and document a suitable treatment.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free