MENU
Alicia is aware of the dangers of IT hacking and has therefore created a risk assessment to assess how susceptible her business is to this threat. In her risk assessment, she has considered her employees and suppliers. Is this the correct thing to do?
Suggested Answer: C
Get Premium L6M7 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
While it is important to consider employees and suppliers, cybersecurity risks can exist at various points in the supply chain. Alicia needs to assess potential threats at every stage. A risk assessment alone does not protect against threats (Option B is incorrect), and there is no indication that a third party must complete the assessment (Option D). (P.154)
29 comments · newest first
CL
Clemencia
11 months ago
I’m surprised she didn’t consider more areas, like software vulnerabilities!
HU
Huey
11 months ago
Wait, why not get a third party to do the assessment? Seems safer.
DE
Dean
12 months ago
A risk assessment is definitely a smart move for any business.
CE
Cecily
12 months ago
I think she should look at the whole supply chain too.
DE
Derrick
1 year ago
Totally agree, employees are the main target for hackers!
MA
Maybelle
1 year ago
I feel like just focusing on employees and suppliers might overlook other vulnerabilities. Shouldn't she also look at her IT infrastructure?
AN
An
1 year ago
I practiced a similar question where the focus was on third-party risks. I wonder if Alicia's assessment is enough without external input.
JE
Jeanice
1 year ago
I'm not entirely sure, but I think a comprehensive risk assessment should include the entire supply chain, right?
ER
Erasmo
1 year ago
I remember discussing how employees are often the weakest link in cybersecurity, so I think considering them makes sense.
JE
Jeanice
1 year ago
This seems straightforward. Alicia is right to consider employees and suppliers, but she should also look at risks throughout the supply chain. Option C is the way to go.
PR
Precious
1 year ago
I'm a little confused by this question. Does the risk assessment have to be done by a third party, or can Alicia do it herself? I'm leaning towards C, but I'm not 100% sure.
HE
Helga
1 year ago
Okay, I think I understand the key here. Alicia needs to look at the whole supply chain, not just her own employees. Option C seems like the best choice to me.
JO
Joanne
1 year ago
Hmm, I'm a bit unsure about this one. I know risk assessment is important, but I'm not sure if considering just employees and suppliers is enough. Maybe I should re-read the question carefully.
QU
Quentin
1 year ago
This seems like a straightforward question about risk assessment. I think I've got a good handle on this topic, so I'll go with option C.
LI
Lindsey
2 years ago
I'm gonna have to go with C. Alicia can't just focus on her own employees - the suppliers could be the Achilles' heel. Gotta watch out for those shady third-party vendors, am I right?
AR
Arleen
2 years ago
D all the way! A third-party assessment would be much more thorough and unbiased. Alicia might be missing something if she does it herself. Plus, it'll make the company look more legit.
NI
Nickolas
2 years ago
But shouldn't Alicia also consider risks throughout the supply chain? I think option C is also important.
AR
Arminda
2 years ago
I'll go with B. A risk assessment is a great first step to protecting the company, even if it doesn't cover the whole supply chain. Baby steps, you know?
JO
Johna
2 years ago
User 2: Yeah, I agree. It's better to have some protection in place than none at all.
SA
Samira
2 years ago
User 1: I think B is the best option. It's important to start somewhere with a risk assessment.
CA
Carol
2 years ago
It's important to take steps to protect the company from cyber threats.
SH
Shawna
2 years ago
I agree, starting with a risk assessment is a good idea.
DE
Destiny
2 years ago
I agree with you, Aileen. It's important to assess all potential vulnerabilities to protect the business from cyber threats.
AI
Aileen
2 years ago
I think Alicia is doing the right thing by considering her employees and suppliers in the risk assessment.
NA
Nadine
2 years ago
Totally agree with C - the supply chain is a critical part of the risk assessment and shouldn't be overlooked. Hackers will target any weak link.
TE
Teri
2 years ago
Agreed, a comprehensive risk assessment should include all potential vulnerabilities, including those in the supply chain.
BE
Berry
2 years ago
Absolutely, hackers will target any weak link they can find. Alicia needs to be thorough in her risk assessment.
CL
Claudia
2 years ago
I think Alicia should also consider risks throughout the supply chain. It's important to cover all bases.
RY
Ryan
2 years ago
Yes, I agree with C too. The supply chain is definitely a weak link that hackers can exploit.