____ seeks to determine the risks that an organization faces against its information assets.
A) Risk identification
B) Security policy design
C) Security policy evaluation
D) Compliance monitoring and evaluation

Question

Quizplus · Accepted Answer

Risk identification is the process of identifying potential risks and threats to an organization's information assets. It is the first step in developing a comprehensive security strategy to protect those assets. Security policy design, evaluation, and compliance monitoring are important components of a security strategy, but they are not focused specifically on identifying risks.

____ Seeks to Determine the Risks That an Organization Faces