Chapter 1
Security Architecture
Course: Comptia Securityx Cas 005
Subject: Comptia Securityx Cas 005 Practice Exam
Chapter: Governance Risk And Compliance
Applying appropriate risk strategies involves tracking, monitoring, and managing risks to align with organizational goals and compliance requirements. These strategies include implementing key metrics, defining risk tolerance levels, and enforcing security practices through policies and procedures.
1. Risk Tracking
a) Risk Register
- Definition: A document or tool used to track identified risks, their assessments, mitigation plans, and current status.
- Key Elements:
Risk Description: Detailed explanation of the risk. Likelihood and Impact: Qualitative or quantitative assessment. Owner: Individual responsible for managing the risk. Mitigation Plan: Steps to reduce or eliminate the risk. Status: Updates on risk progress (e.g., Open, Mitigated, Accepted).
- Risk Description: Detailed explanation of the risk.
- Likelihood and Impact: Qualitative or quantitative assessment.
- Owner: Individual responsible for managing the risk.
- Mitigation Plan: Steps to reduce or eliminate the risk.
- Status: Updates on risk progress (e.g., Open, Mitigated, Accepted).
- Example: A risk register for a software development project might list risks such as vendor delays, cybersecurity threats, and budget overruns.