Câu 100: CISSP: Certified Information Systems Security Professional

An organization is setting a security assessment scope with the goal of developing a Security Management Program (SMP). The next step is to select an approach for conducting the risk assessment. Which of the following approaches is MOST effective for the SMP?

1. A. Security controls driven assessment that focuses on controls management
2. B. Business processes based risk assessment with a focus on business goals — đáp án hiện tại
3. C. Asset driven risk assessment with a focus on the assets
4. D. Data driven risk assessment with a focus on data