As part of an I&T related risk assessment, which of the following should be reviewed to obtain an initial view of overall I&T related risk for the enterprise?
A.
Threats and vulnerabilities for each risk factor identified
B.
Components of the risk register with remediation plans
The risk universe represents all potential risks that an organization faces. Reviewing the components of the risk universe at a high level provides an initial overview of the overall I&T-related risks for the enterprise. This allows for a broad understanding of the landscape before diving into more specific details.
While threats and vulnerabilities (A) are important, they are part of the risk universe, not the overall view. The risk register (B) contains details of identified risks, often with remediation plans, but it's a subset of the risk universe.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit