Part VIII — Analyzing and Responding to Threats

Chapter 21

Risk Assessment and Mitigation

Domain 8

📖 Key Topics Covered

  • ▸ Risk Assessment and
  • ▸ Calculate SLE, ARO, and ALE for quantitative risk analysis
  • ▸ Understanding Risk
  • ▸ The Risk Equation
  • ▸ Risk = Threat × Vulnerability × Impact
  • ▸ Risk Assessment Methods
  • ▸ WHEN TO USE
  • ▸ Subjective ratings (High/
  • ▸ Risk matrix, priority
  • ▸ Numerical values (dollar
  • ▸ ALE, SLE, ARO
  • ▸ Financial decision‐
  • ▸ Quantitative Risk Concepts
  • ▸ Asset Value (AV)
  • ▸ Exposure Factor (EF)

🔑 Key Terms

Impact Threat Vulnerability

See the full definitions in the Glossary and test yourself with Flashcards.

Assessment Tips

💡 Assessment Tip

Know the four risk response strategies and when each is appropriate. Also know the quantitative formulas: SLE = AV × EF, and ALE = SLE × ARO. If the ALE is $100,000, it makes economic sense to spend up to $100,000 per year on controls to mitigate tha

← Chapter 20 All Chapters Chapter 22 →