Management Of Information Security
6th Edition
ISBN: 9781337405713
Author: WHITMAN, Michael.
Publisher: Cengage Learning,
expand_more
expand_more
format_list_bulleted
Expert Solution & Answer
Chapter 7, Problem 10RQ
Explanation of Solution
Defense risk treatment strategy:
- It is the strategy that attempts to prevent the exploitation of the vulnerability.
- It is accomplished through: Application of training and education, Application of policy, Countering threats, and Implementation of technical security controls and safeguards.
Three common approaches:
The three common approaches are:
- The Application of policy.
- The Application of training, security education, and awareness.
- The Implementation of technology...
Expert Solution & Answer
Trending nowThis is a popular solution!
Students have asked these similar questions
Risk reduction strategy(ies) is (are):
Select one:
a. Damage limitation
b. Risk avoidance, Risk detection and removal, and Damage limitation
c. Risk detection and removal
d. Risk avoidance
Which of the following are stages of risk-based analysis
Select one:
a. Risk identification, analysis and classification, decompisition and reduction assessment are not the complete stages
b. Risk identification, analysis and classification, decompisition and reduction assessment
c. Risk decompisition and reduction assessment
d. Risk identification, analysis and classification
A recommended approach is that the people assigned to implement a risk management program should begin by studying the models presented earlier in this chapter and identifying what each offers to the envisioned process. Once the organization understands what each risk management model offers, it can adapt one that is a good fit for the specific needs at hand.
Which risk control strategy would you consider the most effective and why? When should the strategy be used and why should it not be used for all risks?
Chapter 7 Solutions
Management Of Information Security
Ch. 7 - Prob. 1RQCh. 7 - Prob. 2RQCh. 7 - Prob. 3RQCh. 7 - Prob. 4RQCh. 7 - Prob. 5RQCh. 7 - Prob. 6RQCh. 7 - Prob. 7RQCh. 7 - Prob. 8RQCh. 7 - Prob. 9RQCh. 7 - Prob. 10RQ
Ch. 7 - Prob. 11RQCh. 7 - Prob. 12RQCh. 7 - Prob. 13RQCh. 7 - Prob. 14RQCh. 7 - Prob. 15RQCh. 7 - Prob. 16RQCh. 7 - Prob. 17RQCh. 7 - Prob. 18RQCh. 7 - Prob. 19RQCh. 7 - Prob. 20RQCh. 7 - Prob. 1ECh. 7 - Prob. 2ECh. 7 - Prob. 3ECh. 7 - Prob. 4ECh. 7 - Prob. 5ECh. 7 - Prob. 6ECh. 7 - Prob. 7ECh. 7 - Prob. 1DQCh. 7 - Prob. 2DQCh. 7 - Prob. 1EDM
Knowledge Booster
Similar questions
- Explain the importance of reviewing historical documentation, including past risk assessments, business impact analyses, security policies and procedures, and incident reports, as a foundation for risk mitigation planning. How can analyzing past vulnerabilities and threats inform the identification of similar risks in the present? Discuss the trade-off between focusing on specific risks and vulnerabilities for individual systems and functions (narrow focus) versus taking a broader organizational perspective (broad focus) when planning risk mitigation strategies. Highlight the benefits and limitations of each approach.arrow_forwardThe final step in the security risk assessment process is to a. create a chart that identifies loss events, their frequency, and their monetary costs b. C. d. analyze the costs and benefits of various countermeasures assess the feasibility of implementing each of the identified mitigation measures decide whether or not to implement particular countermeasuresarrow_forwardWhat is difference between Risk and Threat?arrow_forward
- Distinguish the differences between the threat, vulnerability, and risk assessment processes.arrow_forwardIn which phase of secSDLC is contingency planning carried out? Multiple answers : A: planning B: analysis C: design D: implementationarrow_forwardHow exactly does one go about transforming an organization's information security plan into a workable project strategy?arrow_forward
- What are the differences in formation security and risk management between the perimeter network and the interior network, and how do they interact?arrow_forwardIn the threat assessment, what is the difference between intention and motivation?arrow_forward............... identifie(s) risks from the systems environment. Aim is to develop an initial set of system security and dependability requirement Select one: a. Preliminary risk analysis b. Preliminary risk analysis, life cycle risk analysis and operational risk analysis c. Life cycle risk analysis d. Operational risk analysisarrow_forward
- After reading the case presented in the module, write a short response to the following discussion questions and ethical decision making scenario. Discussion Questions Before the discussion at the start of this chapter, how do Fred, Gladys, and Charlie each perceive the scope and scale of the new information security effort? Did Fred’s perception change after that? How should Fred measure success when he evaluates Gladys’ performance for this project? How should he evaluate Charlie’s performance? Which of the threats discussed in this chapter should receive Charlie’s attention early in his planning process?arrow_forwardHow exactly does an organization's information security plan function as the project's overall strategy?arrow_forwardOnly issues related to IT security will be prioritized throughout solution development.arrow_forward
arrow_back_ios
SEE MORE QUESTIONS
arrow_forward_ios
Recommended textbooks for you
Management Of Information SecurityComputer ScienceISBN:9781337405713Author:WHITMAN, Michael.Publisher:Cengage Learning,
Principles of Information Security (MindTap Cours...Computer ScienceISBN:9781337102063Author:Michael E. Whitman, Herbert J. MattordPublisher:Cengage Learning
Information Technology Project ManagementComputer ScienceISBN:9781337101356Author:Kathy SchwalbePublisher:Cengage Learning
Management Of Information Security
Computer Science
ISBN:9781337405713
Author:WHITMAN, Michael.
Publisher:Cengage Learning,
Principles of Information Security (MindTap Cours...
Computer Science
ISBN:9781337102063
Author:Michael E. Whitman, Herbert J. Mattord
Publisher:Cengage Learning
Information Technology Project Management
Computer Science
ISBN:9781337101356
Author:Kathy Schwalbe
Publisher:Cengage Learning