Cybersecurity and Response Planningintermediate
Place the following stages of an information security risk assessment and treatment process in the correct order from first to last.
Answer
Identify data assets and owners, Identify threats, Identify vulnerabilities, Rate initial risk, Apply controls, Reassess residual risk
Explanation
### The order
1. **Identify data assets and owners**: establish what needs protection and who is responsible for it.
2. **Identify threats**: determine possible causes of harm.
3. **Identify vulnerabilities**: find weaknesses those threats could exploit.
4. **Rate initial risk**: assess likelihood and impact before controls.
5. **Apply controls**: reduce exposure through technical or administrative safeguards.
6. **Reassess residual risk**: determine what remains after safeguards.
### Remember
Know the asset, threat, and weakness before estimating and treating risk.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free