TOGAF Enterprise Architecture Foundation — Question 77

What are the following activities part of?

Initial risk assessment -
Risk mitigation and residual risk assessment
Risk monitoring

Answer options

• A. Security Architecture
• B. Risk Management
• C. Phase C
• D. Phase A

Correct answer: B

Explanation

The listed activities are all integral components of Risk Management, as they focus on identifying, mitigating, and monitoring risks. Security Architecture and the phases mentioned do not encompass the comprehensive processes of assessing and managing risks in the same way.