During the risk analysis phase of the planning, which of the following actions could manage threats or mitigate the eff ects of an event?
A.
Modifying the exercise scenario.
B.
Developing recovery procedures.
C.
Increasing reliance on key individuals
D.
Implementing procedural controls.
Explanation:
D: The third element of risk is mitigating factors. Mitigating factors are the controls or safeguards the planner will put in place to reduce the impact of a threat. Page 276.
During a risk analysis (phase) you never implement controls. That is done after the analysis. This understanding is examined through many CISSP test exam questions. Please, rephrase question by taking a close look at the terms ‘during’ and ‘implementing’. Also check the business continuity steps referred to by Shon Harris which are based on NIST 800-34.
The third element of risk is mitigating factors. Mitigating factors are the controls or safeguards the planner will put in place to reduce the impact of a threat