What Should Each Information Asset-Threat Pair Have at a Minimum

question 10

Multiple Choice

What should each information asset-threat pair have at a minimum that clearly identifies any residual risk that remains after the proposed strategy has been executed?

• A) probability calculation
• B) documented control strategy
• C) risk acceptance plan
• D) mitigation plan

---

Definitions:

Five-Year Period

A specified duration of time, often used in contexts such as contracts, warranties, and strategic planning, comprising five consecutive years.

Mens Rea

A legal term referring to the mental state or intention behind committing a crime; a key element in determining culpability.

Regulatory Crimes

Offenses that violate laws or regulations intended to protect the public welfare, often involving health, safety, and the environment.

Mala Prohibita

Refers to acts that are crimes only because they are prohibited by law, not because they are inherently immoral or harmful.