(ISC)2 Certified in Cybersecurity Practice Exam

When ranking risks, which two factors are considered?

1. Probability and Vulnerability

2. Likelihood and Impact

3. Severity and Exposure

4. Risk and Threat Level

The correct answer is: Likelihood and Impact

The correct answer focuses on the two critical factors in risk assessment: likelihood and impact. In risk management, likelihood refers to the probability of a risk event occurring, while impact assesses the consequences or severity of that event should it occur. By evaluating these two dimensions, organizations can prioritize risks effectively, determining which ones require immediate attention and resources based on how often they might occur and the degree of potential damage. This approach allows for a more organized response to risk, ensuring that resources are allocated to mitigate the threats that could have the most serious implications for the organization. The combination of understanding both likelihood and impact enables a comprehensive overview of the risk landscape and helps inform better decision-making regarding ongoing security practices.