What term is the process of analyzing potential threats and deciding how to prevent them?

What term is the process of analyzing potential threats and deciding how to prevent them?

• A. Risk Assessment
• B. Governance
• C. Compliance
• D. Risk Management

Answer: (D)

Risk management encompasses identifying potential threats, evaluating their probability and impact, and choosing and applying safeguards to prevent or mitigate those threats. The idea of analyzing threats and deciding how to prevent them fits within this lifecycle because after assessing risks you determine which controls to implement, assign ownership, and monitor effectiveness. Risk assessment by itself is mainly the analysis step and doesn’t cover implementing or managing preventive actions over time. Governance provides the oversight structure, and compliance focuses on meeting laws and policies, not the ongoing process of threat analysis and prevention. So the overall process described is risk management.

Risk management encompasses identifying potential threats, evaluating their probability and impact, and choosing and applying safeguards to prevent or mitigate those threats. The idea of analyzing threats and deciding how to prevent them fits within this lifecycle because after assessing risks you determine which controls to implement, assign ownership, and monitor effectiveness. Risk assessment by itself is mainly the analysis step and doesn’t cover implementing or managing preventive actions over time. Governance provides the oversight structure, and compliance focuses on meeting laws and policies, not the ongoing process of threat analysis and prevention. So the overall process described is risk management.