Which of the following statements are true about security risks?
Each correct answer represents a complete solution. Choose three.

Which of the following measurements of a disaster recovery plan are aimed at detecting unwanted
events?

The Incident handling process implemented in an enterprise is responsible to deal with all the

incidents regarding the enterprise. Which of the following procedures will be involved by the
preparation phase of the Incident handling process?

Which of the following procedures is designed to enable security personnel to identify, mitigate,
and recover from malicious computer incidents, such as unauthorized access to a system or data,
denial-of-service attacks, or unauthorized changes to system hardware, software, or data?

Which of the following processes involves reducing the risk until it reaches a level acceptable to an
organization?

Which of the following classification schemes is considered to be of a personal nature and is
intended for company use only?

In which of the following DRP tests does a business unit management meet to review the plan?

In risk analysis, which of the following can be identified as a consequence of a disaster?

Which of the following processes involves taking measures to alter or improve the risk position of
an asset throughout the company?

Which of the following plans provides procedures for disseminating status reports to personnel
and the public?