Sally finally got her boss to understand that the company needs protection against threats. But her boss questions if there is such a thing as total protection. What is Sally's boss concerned about?

Question

Quizplus · Accepted Answer

Once a company has navigated the issues of total threat, the company still must be concerned with residual risk. The goal of total risk is to reduce a company's overall risk to an acceptable level, however no system can ever be 100 percent secure. The left over risk level is residual risk. Conceptual formula: (threats x vulnerability x asset value) x controls gap = residual risk.

Sally Finally Got Her Boss to Understand That the Company