MENU
Which of the following surveys should be conducted to determine the effectiveness of risk controls and justify their placement within the security budget?
Suggested Answer: D
Get Premium ASIS-CPP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
44 comments · newest first
SA
Sarah
11 months ago
Totally agree with the cost-benefit approach!
AL
Alesia
11 months ago
Really? I doubt a vulnerability assessment will show the full picture.
SE
Serina
11 months ago
Probability analysis helps prioritize risks effectively.
NI
Nickolas
11 months ago
I think a cyber risk assessment is more effective.
LI
Lindsey
12 months ago
Cost-benefit analysis is key for budget justification.
CH
Chuck
12 months ago
I’m leaning towards probability analysis, but I recall that cost-benefit analysis often helps justify spending decisions.
MA
Ma
12 months ago
Vulnerability assessment sounds familiar, but I’m uncertain if it specifically addresses the effectiveness of risk controls in the budget context.
VA
Vanesa
1 year ago
I remember practicing a question about risk assessments, and I feel like cyber risk assessment could be relevant here too.
MA
Madonna
1 year ago
I think cost-benefit analysis might be the right choice since it directly relates to budgeting, but I'm not entirely sure.
LA
Lashonda
1 year ago
Okay, let's see here. I think the key is to focus on the factors that are not from the seller's perspective. Gotta eliminate those.
TA
Tawny
1 year ago
This seems pretty straightforward. I think the Service Cloud portal (Customer Community) would be the best option to meet the requirements of allowing customers to submit inquiries, monitor their status, and view their contact information.
CH
Chauncey
1 year ago
Wait, is this a one-tailed or two-tailed test? I want to make sure I apply the right z-score. Better double-check that before solving.
EL
Elliot
1 year ago
I'm a bit confused on this one. The options don't seem to directly address disaster recovery - they're more about specific business operations. I'll have to re-read the question carefully and think about the bigger picture of what a disaster recovery plan should cover.
SH
Sharen
1 year ago
Cost-benefit analysis, hands down. It's the universal language of the corporate world - 'Show me the money!' Cyber risk assessment is a close second, but it's like trying to predict the weather with a Magic 8-Ball.
ED
Edna
1 year ago
Cyber risk assessment is important too, but cost-benefit analysis is more concrete.
FR
Frederick
1 year ago
I agree, it's all about showing the return on investment.
VO
Von
1 year ago
Cost-benefit analysis is definitely the way to go. It's all about the bottom line.
WI
Willard
1 year ago
D) Vulnerability assessment
WI
Willis
1 year ago
C) Cyber risk assessment
MA
Mari
1 year ago
B) Cost-benefit analysis
ER
Erick
1 year ago
A) Probability analysis
DA
Dannette
1 year ago
Vulnerability assessment, all the way! It's like a treasure hunt, but instead of gold, you're looking for holes in the security. Gotta find those weaknesses before the bad guys do. Probability analysis? That's like asking a rock to do the Macarena.
LO
Louisa
1 year ago
Cost-benefit analysis can help prioritize which risk controls are worth investing in.
AS
Ashlyn
1 year ago
Cyber risk assessment is also important to understand the potential impact of different threats.
PH
Phyliss
1 year ago
I agree, vulnerability assessment is crucial for identifying weaknesses in security.
LI
Lindsey
1 year ago
Cost-benefit analysis is the way to go. It's the language the higher-ups understand - 'How much will it cost and how much will it save?' Simple as that. Cyber risk assessment is good too, but it's like trying to herd cats with a laser pointer.
TE
Teresita
1 year ago
Cyber risk assessment all the way! Gotta know what's lurking in the shadows before you can justify those security measures. Vulnerability assessment is a close second, but it's like trying to fix a leaky faucet with duct tape.
AN
Antione
1 year ago
True, but without knowing the specific cyber risks, it's hard to prioritize which vulnerabilities to address first.
IN
Ines
1 year ago
Vulnerability assessment is important too, it helps identify weak spots that could be exploited.
NE
Nettie
1 year ago
I agree, understanding the potential cyber risks is crucial for effective security.
HO
Hoa
1 year ago
Cyber risk assessment all the way! Gotta know what's lurking in the shadows before you can justify those security measures.
HI
Hillary
1 year ago
I see your point. It's all about finding the right balance between understanding the risks and making smart investments in security measures.
EZ
Ezekiel
1 year ago
True, probability analysis can help quantify the likelihood of different risks. But cost-benefit analysis is important too, to make sure we're investing in the right areas.
EL
Elliott
1 year ago
I agree, knowing the potential risks is crucial. But don't you think probability analysis could also provide valuable insights?
MI
Mitsue
1 year ago
Cyber risk assessment all the way! Gotta know what's lurking in the shadows before you can justify those security measures.
GA
Gabriele
1 year ago
I believe a Cost-benefit analysis is also important to justify the placement within the security budget.
TR
Tricia
1 year ago
I agree with Mirta. Cyber risk assessment will provide a comprehensive view of the effectiveness of risk controls.
MI
Mirta
1 year ago
I think a Cyber risk assessment should be conducted.
AD
Adelaide
1 year ago
Probability analysis? Seriously? That's like asking a cat to do calculus. I'd go with the cost-benefit analysis - gotta keep the bean counters happy, you know?
AL
Alex
1 year ago
Yeah, it's all about the numbers when it comes to justifying security budget.
SH
Shawnta
1 year ago
I agree, cost-benefit analysis is the way to go.
CA
Carlee
1 year ago
I'm not sure, but I think D) Vulnerability assessment could also help in determining the effectiveness of risk controls.
BL
Blythe
2 years ago
I agree with Nieves. Cyber risk assessment would provide the most relevant information.
NI
Nieves
2 years ago
I think the answer is C) Cyber risk assessment.