Exam 14: It Security Management and Risk Assessment

_________ include management,operational,and technical processes and procedures that act to reduce the exposure of the organization to some risks by reducing the ability of a threat source to exploit some vulnerabilities.

Not proceeding with the activity or system that creates the risk is _________.

The _________ provides the most accurate evaluation of an organization's IT system's security risks.

The results of the risk analysis should be documented in a _________.

A ________ is anything that might hinder or present an asset from providing appropriate levels of the key security services.