ISC2 · CISSP
Risk management
CISSP · Lesson 4 of 34 · 22:05
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: threat and vulnerability identification, qualitative and quantitative risk analysis (SLE, ARO, ALE), risk responses, control types and categories, control assessment, continuous monitoring, maturity models, and risk frameworks. Includes three original practice questions.
Preview the topics
- A server is worth $200,000, and a flood would destroy 25% of its value. A flood is expected once every 50 years. What is the annualized loss expectancy?
- A control would cost $30,000 a year, and would lower the ALE from $20,000 to $5,000. What should management do?
- Posters and sign-in banners warn staff that the network is monitored. Which type of control is this mainly?