Security and Risk Management
Question #203
Your company is transitioning to a risk-centric approach. What is the initial step you should take when creating a thorough Risk Assessment?
A. Define what assets have to be assessed.
B. Inform users that an assessment will be running and ask for cooperation.
C. Estimate the value of each asset.
D. Estimate the Exposure Factor (EF) of each asset.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.