CompTIA Security+ (SY0-601) — Question 88
Which of the following is MOST likely to contain ranked and ordered information on the likelihood and potential impact of catastrophic events that may affect business processes and systems, while also highlighting the residual risks that need to be managed after mitigating controls have been implemented?
Answer options
- A. An RTO report
- B. A risk register
- C. A business impact analysis
- D. An asset value register
- E. A disaster recovery plan
Correct answer: B
Explanation
The correct answer is B, a risk register, as it specifically lists and ranks risks along with their potential impact and likelihood, including residual risks post-mitigation. The other options, while related to business continuity and risk management, do not focus on the comprehensive ranking and ordering of risks in the same manner as a risk register does.