Andrew, an incident responder, is performing risk assessment of the client organization. As a part of the risk assessment process, he identified the boundaries of the IT systems, along with the resources and the information that constitute the systems. Identify the risk assessment step Andrew is performing.
- System characterization
- Control analysis
- Likelihood determination
- Control recommendations
Show Answer Next Question