Which of the following terms may be defined as “a measure of possible inability to achieve a goal, objective, or target within a defined security, cost plan and technical limitations that adversely affects the organization’s operation and revenues?
Correct Answer:A
The insider risk matrix consists of technical literacy and business process knowledge vectors. Considering the matrix, one can conclude that:
Correct Answer:D
An adversary attacks the information resources to gain undue advantage is called:
Correct Answer:B
Which of the following is a risk assessment tool:
Correct Answer:C
Risk management consists of three processes, risk assessment, mitigation and evaluation. Risk assessment determines the extent of the potential threat and the risk associated with an IT system through its SDLC. How many primary steps does NIST’s risk assessment methodology involve?
Correct Answer:D