The Goal of InfoSec Is Not to Bring Residual Risk

question 21

Short Answer

The goal of InfoSec is not to bring residual risk to zero; rather,it is to bring residual risk in line with an organization's risk ___________.

---

Definitions:

Utility Function

A formula that quantifies the happiness or satisfaction a consumer gains from consuming different combinations of goods and services.

Edgeworth Box

A diagram used in microeconomics to show the distribution of resources or goods between two parties and to illustrate potential gains from trade.

Pareto Efficient

A Pareto efficient outcome is one in which it is impossible to make any one individual better off without making at least one individual worse off, indicating an optimal allocation of resources.

Utility Function

A mathematical representation of how a consumer's preferences between different goods or services translate into levels of satisfaction or utility.