Overview: Risk Response and Mitigation - Analysis techniques

4 important questions on Overview: Risk Response and Mitigation - Analysis techniques

Which factors should the management consider before selecting a response?

- The priority of the risk as indicated in the risk assessment report
- The recommended controls from the risk assessment report.
- any other response alternatives that are suggested through further analysis.
- The costs of the various response options, including: acquisition cost, training cost, impact on productivity, maintenance and licensing costs.
- Requirements for compliance with regulations or legislation
Alignment of the response option with the strategy of the organisation
- Possibility of integrating the response with other organizational initiatives.
- Compatibility with other controls in place
- Time, resources and budget available

What are the goals of a business case?

- document the problem, one or more options and a detailed analyse on which management can base their decision.
- Operational tool to evaluate and support investments

Name 2 forms of analyses to prepare a business case

1. Cost-benefit analyse
2. ROI
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

Why is calculating the ROI of the implementation of a control difficult?

In part because is depends on predicting the likelihood of a successful attack. And a control brings risk to an acceptable level, it does not eliminate it.

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo