CISM - Info Sec Program Dev & Management (Correct answers)

Opportunity Cost correct answers ______ Reflects the cost to the organization resulting from teh loss of a function Individual Business Managers correct answers _____ Are in the best position for determining the value of information assets. Gap analysis correct answers Measures current state versus future state Organizational requirements correct answers What determines when a wrist has been reduced to an acceptable level Quantitative risk assessment technique correct answers And electrical power outage Heat chart a.k.a. stoplight chart correct answers These quickly and clearly show the current status of remediation efforts Likelihood of loss and monetary value correct answers The most essential elements to consider in assessing risk Calculating the value of the information or asset correct answers When performing a quantitative risk analysis what is the most important to estimate potential loss Take an Asset inventory correct answers The first step and performing and information risk analysis It identifies controls commiserate with impact correct answers What is the primary benefit of performing in information asset classification Identify business assets correct answers What is the first step in performing a risk assessment Feasibility (early in development cycle) correct answers What phase of the development process should risk assessment the first introduced It would cost more to protect the organization than the value of potential loss correct answers In an organization may decide to live with a specific risk because Identifying data owners correct answers What is the first step and is essential to implementing data classification Mitigate the impact by purchasing insurance correct answers If an institution determines that residual risk will always be too high what should they do