Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A is the answer because the first step in the risk assessment process according to ISACA is identifying assets. This involves determining what needs to be protected, such as hardware, software, data, or personnel. Once assets are identified, the risk assessment can proceed to the next step of identifying threats and vulnerabilities.