Practice Quiz

CISSP Information Systems Security

Category - Management

Start a Study Session Sign up for Question of the Day
Sally finally got her boss to understand that the company needs protection against threats. But her boss questions if there is such a thing as total protection. What is Sally’s boss concerned about?
  1. Handled Risk
  2. Possible Risk
  3. Total Risk
  4. Residual Risk
Explanation
Answer: D - Once a company has navigated the issues of total threat, the company still must be concerned with residual risk. The goal of total risk is to reduce a company’s overall risk to an acceptable level, however no system can ever be 100 percent secure. The left over risk level is residual risk. Conceptual formula: (threats x vulnerability x asset value) x controls gap = residual risk.
Was this helpful? Upvote!
Login to contribute your own answer or details
Start a Study Session Sign up for Question of the Day

Top questions

Related questions

Most popular on PracticeQuiz