ISC2 Exam ISSEP Topic 4 Question 74 Discussion

The following are the two major tasks of risk management:

1.Risk identification

2.Risk control

Risk identification is the task of examining and documenting the security posture of an organization's

information technology and the risks it

faces.

Risk control is the task of applying controls to reduce risks to an organization's data and information

systems.

Answer options B and C are incorrect. Building risk free systems and assuring the integrity of

organizational data are the tasks related to the

implementation of security measures.