2. 计算机
  3. There are four ways of dealing with risk. In the graphic that follows, which method is missing and what is the purpose of this m

There are four ways of dealing with risk. In the graphic that follows, which method is missing and what is the purpose of this m

admin2013-12-19  83
问题 There are four ways of dealing with risk. In the graphic that follows, which method is missing and what is the purpose of this method?
选项 A、Risk transference. Share the risk with other entities.
B、Risk reduction. Reduce the risk to an acceptable level.
C、Risk rejection. Accept the current risk.
D、Risk assignment. Assign risk to a specific owner.
答案A
解析 A正确。一旦公司了解了它所面对的总风险和剩余风险的数量，它就必须决定如何应对这些风险。应对风险主要有4种基本方法：转移风险、规避风险、减少风险和接受风险。有很多类型的保险可供公司选择来保护他们的资产。如果公司认为总风险或者剩余风险太高而应对不了，便可以购买保险，这样就将风险转移给了保险公司。
B不正确。因为另外一种方法是风险缓解，即将风险减到一个可接受的程度以继续进行业务。安装防火墙、培训、入侵检测／保护系统都是减少风险的方法。风险减少与风险缓解相同，图中已经列明。
C不正确。因为公司绝对不应该拒绝风险，拒绝风险意味着拒绝应对风险。风险通常会对业务带来负面影响，如果不正确应对的话，公司将不得不应对诸如生产资源流失、法律责任问题或者对声誉带来负面影响等问题。因此，通过转移、规避、减少和接受风险的方法来适当应对已识别的风险至关重要。
D不正确。因为委派某人应对某一个具体的风险不属于应对风险的方法。即使把风险指派给一个具体的实体去处理，它们仍需要转移、规避、减少或接受风险。
转载请注明原文地址:https://kaotiyun.com/show/DNhZ777K
0

CISSP认证

相关试题推荐
随机试题
最新回复(0)