An organization is prioritizing efforts to remediate or miti - CompTIA CAS-005

Question

An organization is prioritizing efforts to remediate or mitigate risks identified during the latest assessment. For one of the risks, a full remediation was not possible, but the organization was able to successfully apply mitigations to reduce the likelihood of impact. Which of the following should the organization perform NEXT?

Answers
  1. correct
Explanation

The correct answer is A. Assess the residual risk.

Residual risk refers to the remaining risk after mitigation efforts have been applied. Once mitigations have been put in place to reduce the likelihood or impact of a risk, it’s crucial to assess the residual risk to understand what risk remains and ensure it’s within an acceptable threshold.

Why the other options are not correct:

  • Update the organization's threat model:

    • While updating the threat model is an important step in continuous risk management, it is not the immediate next action after applying mitigations. The priority should be to assess how much risk remains, i.e., the residual risk.
  • Move to the next risk in the register:

    • Moving on to the next risk without assessing the residual risk would be premature. It's essential to understand how much risk is still present before addressing the next item in the risk register.
  • Recalculate the magnitude of impact:

    • Recalculating the magnitude of impact may be relevant, but it's not as direct as assessing residual risk. The residual risk assessment involves both likelihood and impact, and it’s the next logical step after applying mitigations.

No Payment Cards Needed

Related Courses

Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.

a prepsaret exam featured image
CompTIA Prep

220-1201 - CompTIA A+ Exam Core 1

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

220-1202 - CompTIA A+ Exam Core 2

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud Essentials+ CLO-002

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Network+ N10-009

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Security+ SY0-701

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Data + DA0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Pentest+

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Linux+ XK0-005

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA CySA+ CSO-003

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA DataSys+ DS0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Tech+ FC0-U71

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud+ CV0-004

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Server+ SK0-005

Start Course Prep

Easy way to pass your test within a week with prepsaret

You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams

View Courses Offered