Which of the following will risk analysis not yield?
A.
Monetary values assigned to assets
B.
Probability rate of the occurrence of each threat
C.
Recommended safeguards, countermeasures, and actions
D.
Countermeasures and their costs
Explanation:
A risk analysis is focused on the problem, not the solution. A risk analysis is
conducted only to provide management with a gross calculation or perception of the
potential losses that could be incurred as a result of security problems. The
results will be used to justify a security budget that may enable the funding of
countermeasures, but the risk analysis does not concern itself with these matters,
only with measuring risk.