Exam 3: Assessing Risks in the Enterprise

Which of the following is not part of an exposure inventory list?

If an organization has six facilities, how many exposure inventory sheets should they have?

Which type of threat can be quantified by collecting data on the political stability of the region where facilities are located?

If a specific exposure inventory sheet is not needed for a facility what should you do?

Light equipment includes manufacturing, transportation, and industrial plant equipment.

A heavy equipment exposure inventory sheet should contain ____ equipment.

The ____ threat mitigation sheet details the actions taken or the systems in place to reduce the impact of threats.

A business process inventory illustrates ____ areas.

Which of the following are primary types of organizations?

" style="vertical-align: 0px;" width="419px" height="463px The table above is an example of a revenue collection inventory sheet.

An exposure inventory should be conducted for each facility that an organization owns or operates.

Revenue collection is a goal of a product -focused organization.

Which of the following is part of a personnel exposure inventory sheet?

The exposure inventory sheets provide a bottom-up data collection process.

The physical facilities exposure inventory sheet shows among other things, the square footage of the building.

Which of the following requirements can affect the classification of systems?

The installed systems exposure inventory sheet lists all large systems, servers, workstations and related peripherals.

What are the two primary types of organizations?

List seven areas that should be included in an exposure inventory.

What are the five key goals for a service-focused organization?