CompTIA · Security+ SY0-801
Risk management
Security+ SY0-801 · Lesson 28 of 32 · 4:22:36
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Security+ SY0-801 exam (CompTIA Security+ V8). In this lesson: identifying and assessing risk, qualitative and quantitative analysis (single loss expectancy, annualized rate of occurrence, and annualized loss expectancy), the risk register, risk treatment (transfer, accept, avoid, and mitigate), and business considerations like the business impact analysis, risk appetite, and residual risk. Includes three original practice questions.
Preview the topics
- A server worth $50,000 would lose 40% of its value in a flood, and floods are expected once every ten years. What is the annualized loss expectancy?
- Ashgrove buys a cyber insurance policy to cover the cost of a data breach. Which risk treatment is this?
- Ashgrove’s board will take almost no risk that could stop the factory, but more risk when trying new marketing tools. What is the board describing?