Exam Risk Manager topic 1 question 10 discussion

correct A

The risk assessment method that provides an information security risk assessment methodology and involves three phases: build asset-based threat profiles, identify infrastructure vulnerabilities, and develop security strategy and plans is: A. OCTAVE-S (Operationally Critical Threat, Asset, and Vulnerability Evaluation - Simplified). OCTAVE-S is a variation of the OCTAVE method designed for smaller organizations, and it follows a structured approach with the phases you mentioned: building asset-based threat profiles, identifying vulnerabilities in infrastructure, and developing strategies to manage security risks.