stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
D5 Risk Management Review Flashcards | StudBud
Explore
/
D5 Risk Management Review
D5 Risk Management Review
10 terms
·
StudBud Administration
·
81 plays
Imported from external platform
Flashcards
10 cards
F
Practice quiz
P
Host live
L
Questions
10
Answers
1
Sophisticated security measures are sufficient to prevent all cyber threats without employee training
True
False
2
What does GRC stand for?
General, Risk, and Control
Government, Regulations, and Control
Global, Regulatory, and Compliance
Governance, Risk, and Compliance
3
What is the primary goal of employee education in cybersecurity?
To increase productivity
To enhance technical skills
To reduce operational costs
To promote policy compliance & reduce the human risk factor
4
Which formula is used to calculate cyber risk?
THREAT + VULNERABILITY = RISK
RISK = ASSET VALUE / VULNERABILITY
RISK = VULNERABILITY x ASSETS
THREAT x VULNERABILITY x CONSEQUENCE = CYBER RISK
5
What does cybersecurity risk management involve?
Ignoring minor threats
Building physical defenses
Only responding to risks when they occur
Identifying, assessing and prioritizing risks to cyber threats
6
What is the primary benefit of patch management?
Increasing sales
Reducing costs
Enhancing employee skills
Mitigating software vulnerabilities
7
Which of the following frameworks is NOT mentioned as an existing governance model?
GDPR
ISO
COBIT
NIST
8
The probability of a risk happening is the most important variable in risk prioritization
False
True
9
What is a key feature of a robust backup management plan?
Reducing training time
Enhancing user experience
Protecting critical data
Increasing software updates
10
Risk management is solely the responsibility of cybersecurity analysts
False
True
