What is the process of evaluating IT assets, their importance to the organization, and their susceptibility to threats, to measure the risk exposure of these assets?
A
Risk management
B
Risk assessment
C
Security
D
None of the above
Correct Answer: Risk assessment
Risk assessment is the process of evaluating IT assets, their importance to the organization, and their susceptibility to threats, to measure the risk exposure of these assets. A risk assessment is the combined effort of: identifying and analyzing potential events that may negatively impact individuals, assets, and/or the environment; and making judgments "on the tolerability of the risk on the basis of a risk analysis" while considering influencing factors.