GOVERNANCE - Determining the current state of security - Current risk & BIA
3 important questions on GOVERNANCE - Determining the current state of security - Current risk & BIA
What is included in a full risk assessment
Threat analysis
Vulnerability analysis
Impact analysis
What are common methods to asses risk?
- COBIT5 for Risk
- NIST SP 800-30
- ISO 27005
- OCTAVE - Operational Critical Threat, Asset and Vulnerability Evaluation)
What needs to be included in a current-state assessment
The question on the page originate from the summary of the following study material:
- A unique study and practice tool
- Never study anything twice again
- Get the grades you hope for
- 100% sure, 100% understanding