MIS 416 Exam 1 (100% Correct)

RTO stands for correct answers Recovery Time Objective If you know a single loss expectancy is $100 and the associated annualized rate of occurrence is 5, then what is the annual loss expectancy? correct answers $500 Malignant Threats are threats that are always present. correct answers True What is NOT an indirect cost? correct answers costs to re-create or recover data Risk management choices are made in a top-down fashion affecting the sensitivity of risk throughout the organization. correct answers True Risk assessment and risk analysis are the same thing. correct answers False Why might you need to verify risk elements if a substantial amount of time has passed since you performed a risk assessment? correct answers To make sure that the threats or vulnerabilities you want to mitigate still exist Organizations that accept risk are generally in a ________ mode whereas larger, more well-established organizations are typically more ____________ to risk taking. correct answers Growth, Averse Productivity and replacement costs occur mostly as secondary loss. correct answers False An IT asset inventory is a list of IT assets that are vulnerable to a specific threat that is under assessment. correct answers False A threat event where loss materializes and/or where liability increases. correct answers Loss Event Select all of the following that are components of the RIIOT method. correct answers Review, Interview, Inspect, Observe, Test When we need to sample because we can't gather information from the entire population, and our population consists of a few clusters which had characteristics very similar to each other but not necessarily other groups, we can use what type of sampling? correct answers Stratified Sampling The RIIOT approach to Data Gathering has all the following benefits except? correct answers Simplicity In a qualitative Risk Analysis it is important to define value according to the standard scale. correct answers False