When selecting countermeasures, the most important factor is the overall risk posed to the asset or operation. This includes both the likelihood of a threat and the potential impact. Cost, criticality, and probability are components of the risk equation but are not stand-alone decision criteria.
A (Cost) is important for feasibility but follows risk evaluation.
B (Probability) and C (Criticality) contribute to risk but don’t outweigh it individually.
[References:, PSP Study Guide – Risk Management and Countermeasure Selection, POA Manual – Integrated Risk Assessment Framework]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit