CSA Exam CCZT Topic 6 Question 23 Discussion

Actual exam question for CSA's CCZT exam

Question #: 23
Topic #: 6

[All CCZT Questions]

Scenario: An organization is conducting a gap analysis as a part of

its ZT planning. During which of the following steps will risk

appetite be defined?

ACreate a roadmap

BDetermine the target state

CDetermine the current state

DDefine requirements

Show Suggested Answer

Suggested Answer: D

During the define requirements step of ZT planning, the organization will define its risk appetite, which is the amount and type of risk that it is willing to accept in pursuit of its objectives. Risk appetite reflects the organization's risk culture, tolerance, and strategy, and guides the development of the ZT policies and controls. Risk appetite should be aligned with the business priorities and needs, and communicated clearly to the stakeholders.

Reference=

Certificate of Competence in Zero Trust (CCZT) prepkit, page 7, section 1.3

Risk Appetite Guidance Note - GOV.UK, section ''Introduction''

How to improve risk management using Zero Trust architecture | Microsoft Security Blog, section ''Risk management is an ongoing activity''

by Moira at Aug 22, 2024, 08:03 PM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gary

10 months ago

Hold on, let me consult my trusty 'Gap Analysis for Dummies' handbook. Ah, yes, the risk appetite is defined during the 'Determine the target state' step. It's all about setting those lofty goals and figuring out how much risk you're willing to take to get there.

upvoted 0 times

...

Brandon

10 months ago

Risk appetite? Sounds like something you'd find on a fancy restaurant menu. 'Today's special: Zero Trust Risk Souffle, with a side of Compliance Quiche.'

upvoted 0 times

...

Linwood

10 months ago

Risk appetite? I thought that was just something companies throw around to sound fancy. But seriously, my money's on 'Determine the current state' - that's where they figure out where they're starting from, which includes their current risk profile.

upvoted 0 times

...

Elenor

10 months ago

Ah, the good old gap analysis. I bet the risk appetite is defined in the 'Create a roadmap' step. That's where they plan the whole journey, including the level of risk they're willing to take on.

upvoted 0 times

Donette

8 months ago

Maybe it's actually in the 'Determine the current state' step. That's when they assess the current situation and identify gaps, which would involve understanding the risk appetite to bridge those gaps effectively.

upvoted 0 times

...

Rory

8 months ago

I see your point, but I still think it's in the 'Create a roadmap' step. That's when they lay out the plan and strategy, which should include the risk appetite to ensure they stay on track.

upvoted 0 times

...

Devorah

8 months ago

No, I believe it's in the 'Define requirements' step. That's where they outline what needs to be done and the resources required, which includes factoring in the risk appetite.

upvoted 0 times

...

Jerry

9 months ago

It's important to establish that early on to guide decision-making throughout the planning process.

upvoted 0 times

...

Merissa

9 months ago

Yes, that's when they set the boundaries for how much risk they are willing to accept.

upvoted 0 times

...

Lorean

9 months ago

I think it's actually in the 'Determine the target state' step. That's when they set the goals and objectives, which includes considering the level of risk they can handle.

upvoted 0 times

...

Stefany

9 months ago

I think you're right, the risk appetite is definitely defined in the 'Create a roadmap' step.

upvoted 0 times

...

Earleen

10 months ago

I think risk appetite should be defined when defining requirements, as it will help in setting the criteria for the project.

upvoted 0 times

...

Serina

10 months ago

Actually, I believe risk appetite will be defined when creating a roadmap.

upvoted 0 times

...

Jacquelyne

10 months ago

I agree with Carin, defining risk appetite is crucial when determining the target state.

upvoted 0 times

...

Olive

10 months ago

Hmm, I'm not sure. Maybe it's in the 'Define requirements' step? That's where they figure out what they need to achieve the target state, right?

upvoted 0 times

...

Sheridan

10 months ago

I think the risk appetite will be defined during the 'Determine the target state' step. That's where the organization sets its desired goals and level of risk tolerance.

upvoted 0 times