Key Terms 4

Question 1

Risk Management Guide for Information Technology Systems A U.S. federal standard that is focused on IT risks.

Answer 1

NIST 800-30

Question 2

A focused, qualitative approach that carries out prescreening to save time and money.

Answer 2

Facilitated Risk Analysis Process (FRAP)

Question 3

Team-oriented approach that assesses organizational and IT risks through facilitated workshops.

Answer 3

Operationally Critical Threat, Asset, and Vulnerability Evaluation
(OCTAVE)

Question 4

Australia and New Zealand business risk management assessment approach.

Answer 4

AS/NZS 4360

Question 5

International standard for the implementation of a risk management program that integrates into an information security management system (ISMS).

Answer 5

ISO/IEC 27005

Question 6

Approach that dissects a component into its basic functions to identify flaws and those flaws’ effects.

Answer 6

Failure Modes and Effect Analysis

Question 7

Approach to map specific flaws to root causes in complex systems.

Answer 7

Fault tree analysis

Question 8

Central Computing and Telecommunications Agency Risk Analysis and Management Method.

Answer 8

CRAMM