(ISC)2 Certified in Cybersecurity Practice Exam

In risk management, what does a security practitioner often need to protect?

1. A vulnerability

2. An asset

3. A threat

4. The likelihood

The correct answer is: An asset

In risk management, a security practitioner primarily needs to protect an asset. Assets are valuable entities such as data, hardware, software, and intellectual property that organizations rely on to conduct their operations. Identifying and prioritizing assets allows security practitioners to focus their efforts where they are most needed to minimize risks and potential losses. By protecting assets, organizations ensure the confidentiality, integrity, and availability of critical information and systems, which is fundamental to maintaining business operations and meeting regulatory requirements. The significance of asset protection drives the development of security policies, the implementation of security controls, and the allocation of resources to mitigate risks. While vulnerabilities, threats, and likelihood are important components of risk management, they serve different roles. Vulnerabilities are weaknesses that could be exploited, threats are potential causes of harm, and likelihood refers to the probability of a threat exploiting a vulnerability. Addressing these aspects is essential, but the ultimate goal of a security practitioner is to protect the organization's assets.