An analysis of an information system that rates the likelihood of a security incident occurring and its cost would be included in which of the following?
A)Security policy
B)AUP
C)Risk assessment
D)Business impact analysis
E)Business continuity plan

Question

Quizplus · Accepted Answer

An analysis of an information system that rates the likelihood of a security incident occurring and its cost would be included in the risk assessment. A risk assessment is the process of identifying, analyzing, and evaluating risks to an organization's information systems and assets. The assessment includes identifying potential threats and vulnerabilities, rating the likelihood of a security incident occurring and its impact, and determining the risk level. This information is then used to develop strategies and controls to manage and mitigate the identified risks.

An Analysis of an Information System That Rates the Likelihood