Reader small image

You're reading from  Certified Information Security Manager Exam Prep Guide - Second Edition

Product typeBook
Published inDec 2022
PublisherPackt
ISBN-139781804610633
Edition2nd Edition
Right arrow
Author (1)
Hemang Doshi
Hemang Doshi
author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi

Right arrow

Differentiating Risk Identification, Risk Analysis, and Risk Evaluation

ISACA's qualifications are recognized around the globe and as a result people across the world enroll for their examinations. It is of utmost importance for ISACA to use jargon and terminologies in their study materials and examinations that are globally accepted and that are not restricted to particular countries or continents. It is equally important for all candidates to understand the jargon and terminologies in the way ISACA uses them. For this, you need to let go of local perceptions and wear ISACA's thinking hat.

The following are some important terminologies from the perspective of ISACA's examinations.

Risk Management

Risk management indicates the combination of the following processes:

  • Risk assessment
    • Risk identification
    • Risk analysis
    • Risk evaluation
  • Risk response
  • Risk monitoring

Risk Assessment

Risk assessment is the combination of the following three...

lock icon
The rest of the page is locked
Previous PageNext Page
You have been reading a chapter from
Certified Information Security Manager Exam Prep Guide - Second Edition
Published in: Dec 2022Publisher: PacktISBN-13: 9781804610633

Author (1)

author image
Hemang Doshi

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, and enterprise risk management.
Read more about Hemang Doshi