An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact. Which of the following should the organization perform NEXT?
The correct answer is A. Assess the residual risk.
Residual risk refers to the remaining risk after mitigation efforts have been applied. Once mitigations have been put in place to reduce the likelihood or impact of a risk, it’s crucial to assess the residual risk to understand what risk remains and ensure it’s within an acceptable threshold.
Why the other options are not correct:
Update the organization's threat model:
Move to the next risk in the register:
Recalculate the magnitude of impact:
No Payment Cards Needed
Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.
You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams