?

Question

A. The process of identifying risk, assessing its relative magnitude, and taking steps to reduce it to an acceptable level.
B. An approach to combining risk identification, risk analysis, and risk evaluation into a single strategy.
C. Labels that must be comprehensive and mutually exclusive.
D. The recognition, enumeration, and documentation of risks to an organization's information assets.
E. Occurs when a manufacturer performs an upgrade to a hardware component at the customer's premises.
F. An evaluation of the dangers to information assets, including a determination of their potential to endanger the organization.
G. The quantity and nature of risk that organizations are willing to accept.
H. An asset valuation approach that uses categorical or nonnumeric values rather than absolute numerical measures.
I. Remains even after the current control has been applied.
J. Assigns a risk-rating ranked value to each uncontrolled asset-vulnerability pair.

Answer 1

A. risk management
B. risk assessment
C. classification categories
D. risk identification
E. field change order
F. threat assessment
G. risk appetite
H. qualitative assessment
I. residual risk
J. risk rating worksheet