Free Preparation Discussions
MENU
GAQM ISO-31000-CLA Exam - Topic 4 Question 5 Discussion
Topic #: 4
Which step is the last part of the risk assessment process, which started with risk identification then moved to risk assessment, and finally risk evaluation?
the last step of the risk assessment process, which starts with risk identification, moves to risk assessment, and finally risk evaluation, is Risk evaluation.
Risk evaluation involves comparing the estimated level of risk against the risk criteria established during the risk assessment phase, to determine the significance of the risk and whether it is acceptable or not. This decision is made in consultation with stakeholders, who may provide additional context and information to inform the decision.
The American Society for Quality (ASQ) describes risk evaluation as 'the process of comparing an estimated risk against given risk criteria to determine the acceptability of the risk.' [1]
Similarly, ISO/IEC 27001:2013 (Information technology --- Security techniques --- Information security management systems --- Requirements) defines risk evaluation as 'the process of comparing the estimated risk against given risk criteria in order to determine the significance of the risk.' [2]
Annabelle
9 months agoOmer
9 months agoAmira
10 months agoRodolfo
10 months agoCatrice
10 months agoJarod
10 months agoDeja
10 months agoTayna
11 months agoKarol
11 months agoMozell
11 months agoMoon
11 months agoWilda
11 months agoSheron
11 months agoIrene
2 years agoVonda
2 years agoReita
2 years agoLazaro
2 years agoAlberta
2 years agoEvette
2 years agoDominga
2 years agoCassi
2 years agoLashaunda
2 years agoAvery
2 years agoKanisha
2 years agoDenna
2 years agoLezlie
2 years agoKallie
2 years agoMarge
2 years agoLili
2 years agoMonte
2 years agoSommer
2 years agoLyla
2 years agoDorcas
2 years agoSarah
2 years ago