IT Examiner School

Risk Analysis/Assessment

The risk assessment must effectively Analyze: • Probability & impact associated with the known threats • Vulnerabilities to their assets

59

Risk Analysis/Assessment The risk assessment must effectively Prioritize: • Risks present due to threats & vulnerabilities • Determine appropriate level of training, controls, & assurance necessary for effective mitigation

60