Test Your Cybersecurity Risk Assessment Skills with This Quiz

Play Quiz

Study Flashcards

Spaced Repetition

Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Download our mobile app to listen on the go

Get App

La medida de pérdidas de un solo evento (C) Signup and view all the answers

Multiplicando SLE con la tasa de ocurrencia anualizada (C) Signup and view all the answers

Ambos (D) Signup and view all the answers

La diferencia entre el nivel de riesgo actual y el nivel deseado (C) Signup and view all the answers

Salvaguardas (A) Signup and view all the answers

La necesidad de fondos adicionales para contramedidas (D) Signup and view all the answers

La necesidad de fondos adicionales para contramedidas (A) Signup and view all the answers

Flashcards are hidden until you start studying

AGR begins with identifying threats, vulnerabilities, and risk analysis.
Risk is the product of vulnerability and threat.
Risk requires uncertainty and raises questions about the threat, impact, frequency, and level of uncertainty.
SLE is the measure of losses from a single event, while ALE is the expected losses in a year from a threat.
ALE is calculated by multiplying SLE with the annualized rate of occurrence.
Risk assessment can be quantitative or qualitative.
The gap analysis report identifies the difference between the current risk level and the desired level.
The report helps in selecting safeguards such as HIPS, NIPS, and application firewalls.
A business case simulation can demonstrate the need for additional funding for countermeasures.
The cybersecurity head must demonstrate the risk to obtain additional funding for countermeasures.