Safety & Risk Management Flashcards

Which risk treatment option involves transferring the financial consequences of a risk to a third party?

Answer: Risk transference

Risk transference shifts financial liability to another party, typically through insurance or outsourcing contracts.

A system administrator is classifying data stored on company servers. Which data classification level typically requires the MOST stringent access controls?

Answer: Top Secret / Restricted

Top Secret or Restricted classifications demand the highest level of access controls due to potential for severe harm if disclosed.

What is the primary purpose of a Business Impact Analysis (BIA)?

Answer: To determine the financial and operational impact of service disruptions

A BIA identifies critical business functions and quantifies the impact of disruptions to help prioritize recovery efforts.

Which metric in disaster recovery planning defines the maximum acceptable amount of data loss measured in time?

Answer: RPO (Recovery Point Objective)

RPO defines how far back in time a recovery point must be, essentially the maximum tolerable data loss window.

An attacker exploits a known vulnerability in an unpatched server. Which risk management control failure does this BEST represent?

Answer: Failure of preventive controls

Preventive controls, such as patch management, are designed to stop incidents before they occur; failure to patch allows exploitation.

In a server room, which environmental control is MOST critical for preventing hardware failure due to heat buildup?

Answer: Hot/cold aisle containment and HVAC

Hot/cold aisle containment combined with HVAC systems ensures proper airflow and maintains safe operating temperatures for equipment.

Which document formally authorizes the start of a risk assessment project and defines its scope?

Answer: Project charter

A project charter officially authorizes the project, names the project manager, and defines the scope and objectives of the risk assessment.