Study. uk . com
  1. Home
  2. All questions
  3. Question 62

CISSP study material · question 62 of 500

A risk assessment of an acquisition target reports several high-likelihood exposures, and the assessors close their briefing by recommending that the board abandon the deal. The chief risk officer objects to how the assessors framed their role. Which statement explains that objection?

  1. The assessment belongs to the acquiring business unit rather than an independent team, so its conclusions are premature
  2. The assessment must express every exposure quantitatively before any recommendation to senior leaders carries weight
  3. The assessment may advise against the deal only once each exposure has been confirmed by exploitation during testing
  4. The assessment supplies the information senior leaders need to select a course of action, and the choice remains theirs
Show the answer

Answer: D. The assessment supplies the information senior leaders need to select a course of action, and the choice remains theirs

A risk assessment is an input to decision-making: it gives senior leaders what they need to choose a response, and it does not itself deliver the verdict.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 > Abstract

Challenge yourself on this topic → Study as cards