Câu 26: CISSP-ISSEP: Information Systems Security Engineering Professional

Which of the following statements is true about residual risks

1. A. It can be considered as an indicator of threats coupled with vulnerability.
2. B. It is a weakness or lack of safeguard that can be exploited by a threat.
3. C. It is the probabilistic risk after implementing all security measures. — đáp án hiện tại
4. D. It is the probabilistic risk before implementing all security measures.