GOVERNANCE - Effective Information Security Governance - Determining Risk Capacity and Acceptable risk

5 important questions on GOVERNANCE - Effective Information Security Governance - Determining Risk Capacity and Acceptable risk

How is risk capacity defined?

The objective amount of loss that can be tolerated without damage to existence.

Where is risk appetite translated into?

A number of standards and policies to contain the risk level within the boundaries set by the risk appetite.

Risk acceptance should not exceed what?

Risk appetite and definitely not risk capacity
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart


By what role is risk tolerance defined?

Enterprise level

Where does IT security differ from information security


IT: security within the boundaries of the technology domain
IS: deals with all aspects of information (conversation in elevator)

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo