Exam Risk Manager topic 1 question 10 discussion

Actual exam question from PECB's Risk Manager

Question #: 10
Topic #: 1

Which of the following risk assessment methods provides an information security risk assessment methodology and involves three phases build asset-based threat profiles, identify infrastructure vulnerabilities, and develop security strategy and plans?

A. OCTAVE-S
B. MEHARI
C. TRA

Show Suggested Answer

Suggested Answer: A 🗳️

by SuperMax at Sept. 15, 2024, 12:23 p.m.

Comments

Submit Cancel

1988Greg

6 months, 2 weeks ago

Selected Answer: A

correct A

upvoted 2 times

...

SuperMax

9 months ago

Selected Answer: A

The risk assessment method that provides an information security risk assessment methodology and involves three phases: build asset-based threat profiles, identify infrastructure vulnerabilities, and develop security strategy and plans is: A. OCTAVE-S (Operationally Critical Threat, Asset, and Vulnerability Evaluation - Simplified). OCTAVE-S is a variation of the OCTAVE method designed for smaller organizations, and it follows a structured approach with the phases you mentioned: building asset-based threat profiles, identifying vulnerabilities in infrastructure, and developing strategies to manage security risks.

upvoted 2 times

...