CyberSecurity: Risk Management

1. The identification and assessment of levels of risk in an organization describes: Risk Analysis
2. Two of the activities involved in risk management include identifying risks and assessing risks. Creating an inventory of information assets is part of the risk assessment process?
3. The likelihood of the occurrence of a vulnerability multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability are each examples of Risk assessment estimate factors.
4. Mitigation describes an organization’s efforts to reduce damage caused by a realized incident or disaster through planning and preparation.
5. Risk appetite can be described as the quantity and nature of risk that organizations are willing to accept as they evaluate the trade-offs between perfect security and unlimited accessibility?