In the context of general security risk assessment,which of the following is true of the concept of reasonable assurance?
A)It decides whether or not to implement a particular countermeasure against attacks.
B)It recognizes that managers must use their judgment to ensure that the cost of control does not exceed a system's benefits.
C)It recognizes the loss events or the risks or threats that could occur,such as a distributed denial-of-service attack or insider fraud.
D)It determines the impact of each threat occurrence.

Question

Quizplus · Accepted Answer

Reasonable assurance is the concept that managers should use their judgment to ensure that the cost of control does not exceed a system's benefits. It recognizes that there will always be some level of risk, and that it is not always possible or practical to eliminate all risks. Instead, managers should balance the costs and benefits of different control measures to ensure that they provide reasonable assurance against threats and risks. A, C, and D are not accurate descriptions of the concept of reasonable assurance.

In the Context of General Security Risk Assessment,which of the Following