MENU
What type of process is risk management?
Suggested Answer: A
Get Premium ISO-IEC-27005-Risk-Manager Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
According to the CRAMM (CCTA Risk Analysis and Management Method) methodology, risk assessment begins by collecting detailed information on the system and identifying all assets that fall within the defined scope. This foundational step ensures that the assessment is comprehensive and includes all relevant assets, which could be potential targets for risk. This makes option A the correct answer.
37 comments · newest first
AI
Aimee
10 months ago
I thought it was just a one-time thing, but ongoing makes sense!
LE
Leandro
11 months ago
Wait, it has to be annual? That seems too rigid.
DY
Dylan
11 months ago
I agree, it should be ongoing to stay effective.
JA
Jamie
11 months ago
I think it's more iterative, especially with audits involved.
AR
Armando
11 months ago
Definitely ongoing! You can't just set it and forget it.
YO
Yolando
12 months ago
I’m a bit confused; I thought risk management was more about regular assessments rather than just being ongoing. Maybe I should go with option A?
DA
Davida
12 months ago
I feel like option A makes the most sense since it talks about monitoring risk continuously, which aligns with what we learned.
TA
Tarra
12 months ago
I remember practicing a question that emphasized the iterative nature of risk management, so I might lean towards option B.
SH
Shala
1 year ago
I think risk management is ongoing, but I'm not sure if it needs to be conducted annually like option C suggests.
FR
Franchesca
1 year ago
I think the key here is that risk management is an ongoing, continuous process, not something that's done in isolation or on a fixed schedule. Option A seems to capture that best, so I'm leaning towards selecting that one.
GL
Glenna
1 year ago
Wait, is risk management really just an ongoing process? I thought there were more specific requirements around how it's conducted. I'm a bit confused by the wording of these options - I'll need to re-read them carefully to make sure I understand the nuances.
JA
Jackie
1 year ago
Okay, I've got this. Risk management is an ongoing process that allows organizations to continuously monitor and manage risks. It's not something that's just done once a year or in parallel with other activities. I'm confident option A is the correct answer.
JO
Joaquin
1 year ago
Hmm, I'm a little unsure about this one. Risk management could be ongoing, but it might also be iterative or have some other specific requirements. I'll need to think through the differences between the answer choices to make sure I select the right one.
HU
Hubert
1 year ago
This seems like a straightforward question about the nature of risk management. I'll read through the options carefully and try to identify the key characteristics of each type of process.
VO
Vonda
1 year ago
Hmm, this seems like a tricky one. I'll need to think through the different options carefully.
VI
Vivan
1 year ago
Risk management is like a game of whack-a-mole, but with higher stakes. Gotta stay on top of it, that's for sure.
NO
Noelia
1 year ago
C) Ongoing, which must be conducted annually and be consistent with the selection of security controls
PA
Paulene
1 year ago
Risk management is definitely a continuous process.
RO
Rosio
1 year ago
A) Ongoing, which allows organizations to monitor risk and keep it at an acceptable level
GE
Georgeanna
1 year ago
Annual risk management? No thank you, I want to be on top of it all year round. A is the clear winner here.
EL
Elza
1 year ago
User 3: I think A is the way to go, keeping risk at an acceptable level is key.
JA
Jacklyn
1 year ago
User 2: Definitely, option A seems like the best choice for ongoing monitoring.
VI
Vilma
1 year ago
User 1: I agree, staying on top of risk management all year round is crucial.
CA
Casandra
1 year ago
Hold up, is this a trick question? Iterative risk management? I think I'll stick with the classic ongoing approach.
MA
Marget
1 year ago
Hmm, I'd say option A is the way to go. Monitoring risk is key to keeping it under control.
ME
Meaghan
1 year ago
Option A seems like the most effective approach for risk management.
DU
Dustin
1 year ago
It's an ongoing process that needs to be consistently monitored.
CH
Cheryll
1 year ago
Definitely, keeping risk at an acceptable level is important for organizations.
RI
Rikki
1 year ago
I agree, monitoring risk is crucial to maintaining control.
KA
Kayleigh
2 years ago
But isn't it also iterative, conducted simultaneously with internal audits?
EV
Evangelina
2 years ago
Risk management is definitely an ongoing process. Gotta keep a close eye on those risks, am I right?
JO
Jolanda
1 year ago
Absolutely, staying proactive is key in risk management.
JE
Jennie
1 year ago
C) Ongoing, which must be conducted annually and be consistent with the selection of security controls
GE
German
1 year ago
Yes, it's important to continuously assess and manage risks.
ST
Stephaine
1 year ago
A) Ongoing, which allows organizations to monitor risk and keep it at an acceptable level
LA
Laurene
2 years ago
I agree with Ronald, it allows organizations to monitor risk continuously.
RO
Ronald
2 years ago
I think risk management is an ongoing process.