Exam 14: It Risk Analysis and Risk Management

A certain risk has a 1% likelihood of occurrence in the coming year. If the risk is observed, the organization estimates a loss of $1million. The risk is then assessed as

As described in the text, a statement of a risk includes

IT risk is

Risk management is

In the NIST 800-39 framework, risk monitoring

A certain risk has a 1% likelihood of occurrence in the coming year. If the risk is observed, the organization estimates a loss of $1million. A second risk has a 15% likelihood of occurrence in the coming year. If the second risk is observed, the organization estimates a loss of $100,000. Comparing the two risks

In the NIST 800-39 framework, risk assessment

The verification of IT general controls as part of a SOX audit follows a

Section 404 of the Sarbanes-Oxley act of 2002 specifies that

If assessed using the NIST 800-39 framework, the risk estimate is an accurate measure of the IT risk facing the organization

A given threat is usually associated with one risk

The management model that guides the ISO risk management methodology is

IT general controls are controls that

The NIST risk-management framework is specified in the NIST document

Internal controls over financial reporting involve all of the following except

Risk is

The PCAOB created by the Sarbanes-Oxley act of 2002

In the NIST 800-39 framework, risk response

The Sarbanes-Oxley act applies to

Section 302 of the Sarbanes-Oxley act of 2002 specifies that