Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs. When formulating the remediation plan, what is a required input?

Question

Quizplus · Accepted Answer

The risk assessment is a required input for formulating the remediation plan as it identifies the risks and their severity, which guides the development of appropriate security controls.

Scenario: You Are the CISO and Have Just Completed Your