Final Exam: Evaluating and Planning for Security Risks

WHAT YOU WILL LEARN

• 

  Define risk assessment
  

  list the activities in a risk management process
  

  recognize security threat as a risk
  

  describe vulnerability assessment and penetration testing as security assessment methods
  

  recognize the need for risk identification
  

  describe risk strategies taking security-related work examples
  

  describe the details of a risk management plan
  

  describe risk management process for security (with a key focus on standards such as iso 31000)
• 

  demonstrate vulnerability assessment
  

  list risk treatment methods (risk acceptance, avoidance, reduction, transfer)
  

  identify the need to prioritize risks
  

  list the methods used for risk identification
  

  recognize how increasing risk tolerance and risk appetite can be an effective risk management strategy
  

  differentiate between risk appetite and risk tolerance
  

  describe the risk identification process