Information Risk Management (IRM) Is the Process of Identifying and Assessing

question 205

Multiple Choice

Information risk management (IRM) is the process of identifying and assessing risk, reducing it to an acceptable level, and implementing the right mechanisms to maintain that level. What are the different categories of risk? Each correct answer represents a complete solution. Choose all that apply.

• A) System interaction
• B) Human interaction
• C) Equipment malfunction
• D) Inside and outside attacks
• E) Social status
• F) Physical damage

---

Definitions:

PDCA Cycle

A four-step management method used in business for the control and continuous improvement of processes and products; it stands for Plan-Do-Check-Act.

Profitability

The state of yielding financial gain or profit from business activities.

Organizational Effectiveness

The degree to which an organization achieves its goals and objectives through the efficient use of resources.

Span of Control

The number of subordinates a manager or supervisor can effectively manage and control.