Reference no: EM132225213

1. Control is the impact on an organization should a risk materialize.

True

False

2. When choosing a strategy of risk avoidance, you may choose to acknowledge that a risk exists but deliberately decide to take no action because the costs of other risk management strategies outweigh the benefit.

True

False

3. When choosing a strategy of risk acceptance, you simply change your business activities so that you no longer incur the risk.

True

False

4. Impact is a list or description of potential attacks on an asset.

True

False

5. Which of the following is the definition of cost of replacement?

A method of risk assessment that assigns a dollar value to every data point.

What it would cost an organization to replace an asset if it were stolen or compromised.

The relative value, either in monetary terms or in overall impact, of the resource being protected by the access control system.

What an organization would lose if an asset were unavailable.