6. What practice helps address a risk?

7. What ongoing practice helps track risk in real time?

8. True or False: Once an organization completes all risk management steps, from planning through monitoring, the task is done.

9. Given that an IT risk management plan can be large in scope, why is it a good idea to develop a risk management plan team?

10. In the seven domains of a typical IT infrastructure, the User domain is typically the most difficult to plan, identify, assess, treat, and monitor. Why?

11. One of the ways you manage risk is to simply avoid a risky activity. The lab includes a table of identified risks, threats, and vulnerabilities in a healthcare setting. Identify a risk, threat, or vulnerability for which you could avoid the risk. Explain your answer.

12. The lab includes a table of identified risks, threats, and vulnerabilities in a healthcare setting. What would be needed to address those risks, threats, and vulnerabilities in the "Risk Response" section of an IT risk management plan?

13. You can share or transfer risk by shifting responsibility to another party. Risk transfer shifts the entire responsibility or liability; risk sharing shifts a portion of the responsibility or liability. Organizations can outsource part or all of the activity. Identify a risk, threat, or vulnerability from the table in this lab for which you could share or transfer the risk. Explain your answer.

14. For risk monitoring, what are some techniques or tools you can implement in each of the seven domains of a typical IT infrastructure to help mitigate risk?

15. For risk mitigation, what processes and procedures can help streamline and implement risk-mitigation solutions to the production IT infrastructure?

16. What is the purpose of a risk register?

17. How does risk response impact change control management and vulnerability management?