Your company has charged you with the responsibility of developing a risk management programme. The CEO has just asked you to briefly explain the relationship between impact, danger, and susceptibility. Create a concise sentence that explains the link.

What does the value for the risk factor that you discovered in your investigation mean? (f). In the future, what purpose will the value serve?

Describe the steps of the NIST SP 800-37 Risk Management Framework? How do you select the baseline controls (e.g. NIST 800-53r5 Control Catalog baselines) and what does the security categorization mean (NIST FIPS 199) for an information system? When determining the Security categorization for any system, what do you look at?

Provide a short description of each of the five methods used to mitigate risk.

Hi There, Thank you in Advance. Please I need all the answers. Please No need of explanation just chose from the multiple choices. Thanks.  [5] __________ is the level, amount, or type of risk that the organization finds acceptable. [A] Residual Risk  [B] Risk Appetite   [C] Risk Assessment  [D] Risk Avoidance[6] When we choose to mitigate risk by applying countermeasures and controls, the remaining, leftover risk is called __________. [A] Residual Risk  [B] Risk Appetite   [C] Risk Assessment  [D] Risk Transfer [7] In terms of security with _________ the cloud customer is still losing the degree of authority they would have had in a traditional enterprise environment. [A] SaaS    [ B] PaaS    [C]  IaaS  [D] CaaS

Just what is the point of doing a risk analysis and identifying potential weak spots?

In this section, you will prepare a risk mitigation plan using SimpleRisk. Before using SimpleRisk, you will create a paper-based plan. You will need to create three security controls in your risk mitigation plan: one control that reduces the asset value, one that reduces the vulnerability severity, and one that reduces the threat impact. Your security controls should also include examples of both strategic and tactical controls. You can refer to the following table for a clearer picture of the requirements. Security Control Reduces Level (strategic/tactical)   Asset value       Vulnerability severity       Threat Impact     Define three security controls designed to mitigate the risk associated with a recent leak of sensitive information that was stored in cleartext files.   Once you have identified your security controls, use SimpleRisk to create a Risk Mitigation plan. You do not need to perform a management review in this section.