A startup is conducting its first risk assessment. The company has a small team, limited budget, and no historical incident data. The CEO wants a quick assessment to identify the most critical risks. Which approach is most appropriate?

Quantitative, because it provides precise monetary values that investors expect.

Qualitative, because it is fast, cost-effective, and suitable for a first assessment.

Hybrid, because it is always the best approach.

A compliance-based approach, because it ensures regulatory compliance.

Information Systems Security Management Professional

Domain 3Objective 3

3.3 Conduct Risk Assessments ISSMP Practice Questions (Page 6)

Part of the Risk Management domain, which accounts for 20% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 4–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

20%of the exam

Questions 26–26

26expert · hard
A startup is conducting its first risk assessment. The company has a small team, limited budget, and no historical incident data. The CEO wants a quick assessment to identify the most critical risks. Which approach is most appropriate?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

3.3 Conduct Risk Assessments ISSMP Practice Questions (Page 6)

Questions 26–26

A startup is conducting its first risk assessment. The company has a small team, limited budget, and no historical incident data. The CEO wants a quick assessment to identify the most critical risks. Which approach is most appropriate?

Keep studying — Risk Management