(ISC)2 Certified in Cybersecurity Practice Exam

What is one of the main components of risk management?

1. Assessment of relevant threats

2. Creation of marketing strategies

3. Inventory control

4. Hiring new staff

The correct answer is: Assessment of relevant threats

One of the main components of risk management is the assessment of relevant threats. This process involves identifying potential risks that could impact an organization, evaluating the likelihood and potential impact of those risks, and determining how they could affect the organization's ability to achieve its objectives. By assessing relevant threats, organizations can prioritize their risk management efforts and allocate resources effectively to mitigate or manage those risks. This proactive approach enables organizations to implement controls and response strategies tailored to the specific threats they face, thereby enhancing their overall security posture. The other choices, while important in broader business contexts, do not directly relate to risk management. Creating marketing strategies focuses on promoting products or services, which is outside the scope of risk management. Inventory control deals with managing stock levels and supply chain processes, and hiring new staff pertains to human resource management, neither of which are central to identifying and mitigating organizational risks.