Threat Identification & Risk Management Flashcards

Which risk assessment methodology uses probability and impact matrices to prioritize threats?

Answer: Qualitative risk analysis

Qualitative risk analysis uses probability and impact matrices to rank and prioritize threats without precise numerical values.

A security investigator notices an employee repeatedly accessing files outside their job role at odd hours. This behavior is best classified as:

Answer: Insider threat indicator

Accessing files beyond one's job scope during unusual hours is a classic insider threat behavioral indicator.

What does 'residual risk' refer to in a security context?

Answer: Risk remaining after controls are applied

Residual risk is the level of risk that remains after security controls and countermeasures have been implemented.

Which of the following is a PRIMARY goal of a threat vulnerability assessment?

Answer: Determine which assets face the greatest exposure

A threat vulnerability assessment aims to identify which assets are most exposed to identified threats.

In the context of risk management, 'risk acceptance' means:

Answer: Acknowledging risk exists and choosing not to mitigate it further

Risk acceptance is a deliberate decision to tolerate an identified risk without additional mitigation, typically when the cost of control exceeds the potential loss.

A 'threat agent' in security risk terminology refers to:

Answer: The entity capable of exploiting a vulnerability

A threat agent is any person, group, or force with the capability and intent to exploit a vulnerability.

Which risk treatment strategy involves purchasing insurance to cover potential losses from a security incident?

Answer: Risk transfer

Risk transfer shifts the financial burden of a potential loss to another party, most commonly through insurance.