Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Risk analysis relies on threat analysis and probability of occurrence. A disaster is only evaluated through impact and recovery strategy analysis, whatsoever the probability of occurrence. So the response is A.
C. Risk analysis or A. Recovery strategy analysis ?
C. Risk analysis To determine what would constitute a disaster for an organization, it is necessary to conduct a risk analysis. This process involves identifying and evaluating potential threats to the organization's operations and assets, as well as assessing the impact of those threats. The result of this analysis is a comprehensive understanding of the risks facing the organization, including the likelihood of a particular threat occurring and the potential impact if it were to occur. This information is then used to prioritize risks and develop appropriate risk mitigation strategies, including disaster recovery and business continuity plans.