CCP Risk Management & Assessment Flashcards
6 cards from real CCP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CCP Risk Management & Assessment flashcards as text
A threat agent is best defined as:
Answer: An entity capable of deliberately or accidentally exploiting a vulnerability
A threat agent is the individual, group, or environmental force that has the potential to exploit a vulnerability.
Which framework specifically guides U.S. federal agencies through a structured risk management process?
Answer: NIST Risk Management Framework (RMF)
The NIST RMF is mandatory for U.S. federal agencies and provides a structured process for managing information security risk.
The term 'threat landscape' refers to:
Answer: The complete range of potential threats facing an organization
The threat landscape encompasses all known and emerging threats that an organization may face at a given point in time.
Which process systematically identifies, documents, and prioritizes risks to organizational assets?
Answer: Risk assessment
Risk assessment is the structured process of identifying threats and vulnerabilities, then evaluating their likelihood and impact to prioritize treatment.
What artifact produced during risk management records identified risks along with their likelihood, impact, and treatment plans?
Answer: Risk Register
A risk register is a living document that logs all identified risks, their ratings, and the actions planned or taken to address them.
Risk appetite is best described as:
Answer: The amount of risk an organization is willing to accept in pursuit of its objectives
Risk appetite defines the level of risk an organization consciously accepts while pursuing its strategic and operational goals.