Cybersecurity and Response Planningintermediate
Arrange the steps of an information security risk assessment in the correct chronological order from first to last.
Answer
Identify critical information assets, Identify threats targeting the assets, Identify vulnerabilities that could be exploited, Determine the likelihood and impact of exploitation, Calculate and evaluate overall risk levels
Explanation
### The order
1. **Identify data assets and their owners.** You need to know what is being protected and who is responsible for it.
2. **Identify threats.** Determine what actors or events could cause harm.
3. **Identify vulnerabilities.** Find weaknesses a threat could exploit.
4. **Rate initial risk.** Consider likelihood and impact before accounting for selected controls.
5. **Apply technical or administrative controls.** Choose measures intended to reduce risk.
6. **Reassess the remaining risk.** Determine residual risk after the controls are considered.
### Terms
- **Residual risk**: Risk remaining after controls are applied.
### Remember
The assessment ends with reassessment, not merely with control selection.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free