Câu 367: Isaca Certified Information Security Manager

A risk assessment exercise has identified the threat of a denial of service (DoS) attack. Executive management has decided to take no further action related to this risk. The MOST likely reason for this decision is:

1. A. the cost of implementing controls exceeds the potential financial losses. — đáp án hiện tại
2. B. the risk assessment has not defined the likelihood of occurrence.
3. C. executive management is not aware of the impact potential.
4. D. the reported vulnerability has not been validated.