Exam CAS-004 topic 1 question 304 discussion

The primary reason a risk practitioner determines the security boundary prior to conducting a risk assessment is: A. To determine the scope of the risk assessment.

A. To determine the scope of the risk assessment The primary reason a risk practitioner determines the security boundary before conducting a risk assessment is to establish the scope of the assessment. The security boundary defines the extent of the system or environment that will be assessed for risks. This ensures that the assessment focuses on the relevant assets, processes, and interactions within that defined boundary.