Management would like to understand the risk associated with engaging an Infrastructure-as-a-Service (IaaS) provider compared to hosting internally. Which of the following would provide the BEST method of comparing risk scenarios?
A.
Reviewing mitigating and compensating controls for each risk scenario
B.
Mapping the risk scenarios by likelihood and impact on a chart
C.
Performing a risk assessment on the IaaS provider
D.
Mapping risk scenarios according to sensitivity of data
Mapping risk scenarios by their likelihood and impact provides a visual representation (heat map) that makes it easier to compare the range and severity of risks associated with each option. C addresses only half of the comparison.
To add to the confusion, here is GPT4o and GPT4 explaining why it's not C:
(1) Comparative Analysis: Mapping risk scenarios by likelihood and impact allows for a direct comparison between the risks associated with the IaaS provider and those of internal hosting. This visual comparison helps management understand the relative severity of different risks in both contexts.
(2) Holistic View: A risk assessment on the IaaS provider (option C) focuses solely on the external provider's risks, without directly comparing them to internal risks. Option B, on the other hand, includes both internal and external risk scenarios on the same chart, offering a holistic view.
(3) Decision-Making: Management can make more informed decisions when they see how risks compare in terms of both likelihood and impact. This approach supports strategic decision-making by clearly showing which environment (IaaS or internal) presents higher or lower risks.
GPT3.5 said C. Anyone have any quotes from the ISACA book to determine if its C or B?
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
helg420
3 months, 3 weeks agoY0GA
3 months, 4 weeks agoshootnot
3 months, 4 weeks agoats20
6 months ago