Risk terms · Question 9 of 12
Which statements about the relationship between threat, vulnerability and risk are correct?
2 answers are correct. Medium
Show answer
Answer
- A Without a vulnerability, a threat causes no damage
- B An unimportant asset carries hardly any risk
Explanation
A risk only arises when a threat can exploit a vulnerability in an important asset. If one of these elements is missing, the risk is low. A vulnerability is not yet damage, only a possibility. If the impact decreases, the risk decreases too.