Statements ranking information risks and identifying security goals are included in a(n)
A)security policy.
B)AUP.
C)risk assessment.
D)business impact analysis.
E)business continuity plan.

Question

Quizplus · Accepted Answer

Statements ranking information risks and identifying security goals are typically included in a security policy which outlines an organization's overall approach to securing its digital assets. An Acceptable Use Policy (AUP) focuses more narrowly on the acceptable use of an organization's IT resources rather than security risks specifically. A risk assessment evaluates the likelihood and potential impact of security incidents occurring. A business impact analysis identifies how various disruptions could affect an organization's operations. A business continuity plan outlines procedures for maintaining critical business functions in the event of disruptions or disasters.

Statements Ranking Information Risks and Identifying Security Goals Are Included