Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSAP Exam - Topic 4 Question 48 Discussion

Posted by Brandon on May 09, 2022 at 01:14 PM

Your company is covered under a liability insurance policy, which provides various liability coverage for information security risks, including any physical damage of assets, hacking attacks, etc. Which of the following risk management techniques is your company using?

Suggested Answer: C

policy providing various liability coverage for information security risks, including any physical damage of assets, hacking attacks, etc., it means

it has transferred its security risks to the insurance company.

Answer option B is incorrect. Risk avoidance is the practice of not performing an activity that could carry risk. Avoidance may seem the answer

to all risks, but avoiding risks also means losing out on the potential gain that accepting (retaining) the risk may have allowed.

Answer option D is incorrect. Risk mitigation is the practice of reducing the severity of the loss or the likelihood of the loss from occurring.

Answer option A is incorrect. Risk acceptance is the practice of accepting certain risk(s), typically based on a business decision that may also

weigh the cost versus the benefit of dealing with the risk in another way.


Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
JE
Jenise 11 months ago
Isn't risk acceptance just ignoring the problem?
NO
Nohemi 12 months ago
I think it's more about risk mitigation, not just transfer.
YU
Yuki 12 months ago
Wait, can we really rely on insurance for hacking?
CE
Celia 12 months ago
Definitely risk transfer, insurance covers that.
CA
Carlton 1 year ago
Sounds like risk transfer to me!
SC
Scarlet 1 year ago
I’m confused; I thought risk avoidance meant completely eliminating the risk, which doesn’t apply here since they still have potential liabilities.
DE
Deeanna 1 year ago
This question feels familiar; I think it could also relate to risk mitigation, but insurance seems more like transferring the risk.
MI
Misty 1 year ago
I'm not entirely sure, but I remember something about risk acceptance being when you just deal with the risks without any coverage.
SA
Salome 1 year ago
I think this might be about risk transfer since the company has insurance to cover potential losses.
CE
Cecilia 1 year ago
I feel pretty confident about this question. The key is to make sure the communication is clear, structured, and responsive to the needs of the business. Hitting all those points in the answer choices will be crucial.
EL
Elly 1 year ago
This question seems straightforward, I think I can handle it.
MA
Maryann 1 year ago
This is a tricky one, but I think the key is understanding what MLAG is and how it works. Let me think this through carefully.
ES
Estrella 1 year ago
Okay, I've got this. The key is to identify which of these statements the auditor would want the client to confirm as part of their written representations.
0/2000 characters

Save Cancel