Free Preparation Discussions
MENU
Isaca CISM Exam - Topic 4 Question 59 Discussion
Topic #: 4
When preventive controls to appropriately mitigate risk are not feasible, which of the following is the MOST important action for the information security manager?
When preventive controls to appropriately mitigate risk are not feasible, the most important action for the information security manager is to manage the impact, which means taking measures to reduce the likelihood or severity of the consequences of the risk. Managing the impact can involve using alternative controls, such as engineering, administrative, or personal protective controls, that can lower the exposure or harm to the organization. The other options, such as identifying unacceptable risk levels, assessing vulnerabilities, or evaluating potential threats, are part of the risk assessment process, but they are not actions to mitigate risk when preventive controls are not feasible. Reference:
https://bcmmetrics.com/risk-mitigation-evaluating-your-controls/
https://www.osha.gov/safety-management/hazard-prevention
https://www.cdc.gov/niosh/topics/hierarchy/default.html
Yuriko
3 months agoCarey
3 months agoEve
4 months agoMarnie
4 months agoMing
4 months agoTruman
4 months agoTamar
4 months agoEden
5 months agoHector
5 months agoNatalya
5 months agoMillie
5 months agoAdrianna
5 months agoShawnna
5 months ago