Exam 14: It Security Management and Risk Assessment

The four approaches to identifying and mitigating risks to an organization's IT infrastructure are: baseline approach,detailed risk analysis,combined approach,and __________ approach.

Not proceeding with the activity or system that creates the risk is _________.

Because the responsibility for IT security is shared across the organization,there is a risk of inconsistent implementation of security and a loss of central monitoring and control.

________ specification indicates the impact on the organization should the particular threat in question actually eventuate.

Once the IT management process is in place and working the process never needs to be repeated.