Information Risk — BCS Foundation Certificate in Information Security Management Principles

The official BCS documentation our Information Risk practice questions are cited to. Review the primary sources, then practise.

practice 20 questions →

Official references for this objective

Bcs — Risk assessment frames of reference | BCS

The fundamental problem is that such terms can mean radically different things to different people.
Bcs — Risk assessment | BCS

A single control can only manage one side of the risk equation so you need a minimum of two controls for each risk
Bcs — Cyber risk assessment in a post-IS1 world | BCS

NCSC, though no longer supporting the documents, has retained IS1 and IS2 as legacy documents. This means that any organisation which wants, or needs, to
Bcs — A successful unified governance, risk and compliance strategy | BCS

Executive and senior management sponsorship is paramount; without this any improvement process will eventually fail.
Bcs — Data loss - liability, reputation and mitigation of risk | BCS

contain specific provisions for press statements to be mutually agreed so that neither party can depict the other as the scapegoat
Bcs — Risk analysis: an alternative approach | BCS

Third and most importantly, this method treats each risk in isolation, which is rarely true in reality.
Bcs — Information risk - how much is it worth to you? | BCS

These indirect costs can include data centre space costs (as storage devices require rack space in which to live), energy costs (which are rapidly rising)
Bcs — Meet your compliance, IT governance and risk management goals | BCS

a new generation of dashboard-style reporting tools that integrate information to give them an immediate snapshot of the current structure and status of all their