1. Categories >> Certifications >> CISA Certification
  2. Suggest New Category

When developing a risk management program, the FIRST
activity to be performed is a/an:

A. threats assessment.

B. classification of data.

C. inventory of assets.

D. criticality analysis.

Question Posted / guest

Answer Posted / guest

Answer: C

Identification of the assets to be protected is the first
step in the development of a risk management program. A
listing of the threats that can affect the performance of
these assets and criticality analysis are later steps in the
process. Data classification is required for defining access
controls, and in criticality analysis.

Is This Answer Correct ?    8 Yes 0 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

WHICH OF THE FOLLOWING IS OFTEN AN ADVANTAGE OF USING PROTOTYPING GOR DYDTEM DVELOPMENT

2847

purchase orders issued to vendors have been authorized as per the authorization matrix

1095