Cassius, a security professional, works for the risk management team in an organization. The team is responsible for performing various activities involved in the risk management process. In this process, Cassius was instructed to select and implement appropriate controls on the identified risks in order to address the risks based on their severity level.
Which of the following risk management phases was Cassius instructed to perform in the above scenario?
The scenario describes Cassius being instructed to select and implement appropriate controls on identified risks based on their severity level. This activity falls under the phase of risk treatment in the risk management process, as risk treatment involves the implementation of measures to mitigate, transfer, accept, or avoid risks based on their assessment.
Risk Prioritization
B) risk treatment p. 2357
Correct Answer is : B (As per CCT book Page No: 2357)