Information systems ________ is done to obtain an understanding of the threats to the confidentiality,integrity,and availability of data and systems.
A) risk assessment
B) quality testing
C) requirements analysis
D) security modeling
E) data processing

Question

Quizplus · Accepted Answer

Risk assessment is the process of identifying, analyzing, and evaluating potential risks and vulnerabilities to an organization's information systems. This is done to determine the likelihood and impact of potential security incidents, and to develop strategies for mitigating or managing those risks. Quality testing, requirements analysis, security modeling, and data processing are all important functions in information systems, but they are not directly related to risk assessment.

Information Systems ________ Is Done to Obtain an Understanding of the Threats