ANSI ASIS PAP.1-2012 Physical Asset Protection APP Practice Exam

Which term refers to actions taken to lessen the probability, negative consequences, or both associated with a risk?

Risk analysis Risk criteria Risk tolerance Risk reduction

Correct Answer:

Risk tolerance

Explanation:

Actions taken to lessen the probability or the consequences of a risk are called risk reduction. This involves implementing controls, safeguards, and countermeasures to lower how likely the risk is to occur or how severe its impact would be if it does occur. Examples include applying security patches, adding access controls, creating redundancy, backing up data, training staff, and establishing incident response plans. This differs from risk analysis, which is about identifying and evaluating risks; risk criteria, which are the standards used to judge risk levels; and risk tolerance, which is the amount of risk an organization is willing to accept.

Access more questions from this quiz

Continue to ANSI ASIS PAP.1-2012 Physical Asset Protection APP Practice Exam for more practice questions and the full quiz experience.

Access More Questions