Chapter 10 Flashcards
What defines Risk?
Probability times impact.
Which 2 conceptualizations does risk have?
Positive risk
Negative risk
What is IT Risk?
The potential for an unplanned event involving IT to threaten an enterprise object.
Where does the 4A framework consists of?
Availability,
Acces,
Accuracy,
Agility.
What is availability in 4A?
Keeping systems running.
What is acces in 4A?
Ensuring appropriate acces.
What is accuracy in 4A?
Providing correct and complete information.
What is agility of 4A?
Being able to make necessary changes with speed and cost.
What is CIA?
Confidentiality,
Integrity,
Availability.
What are the 3 core disciplines of IT Risk Management?
Reduce IT complexity,
Create risk governance,
Create risk-aware culture.