The goal of information security is to bring residual risk in line with an organization's risk appetite._________________________

Question

Quizplus · Accepted Answer

The statement is true. Information security aims to identify, assess, and mitigate risks to reduce the residual risk to an acceptable level that aligns with the organization's risk appetite. Residual risk refers to the remaining risk after all security measures have been implemented.

The Goal of Information Security Is to Bring Residual Risk