SSCP Study Guide

The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the Exam Objectives presented in this chapter, and to assist you with real-life implementation of these concepts.
| Q. | I have identified various risks, analyzed them, and implemented controls and strategies to deal with them. Now that I am done, why should I not forget about the risk and focus on dealing with other risks? | |
| A. | Because the controls and strategies you have implemented may fail. You need to monitor the risks you have dealt with to determine if they are working or not, and then revise strategies and repair or replace controls that have been implemented. | |
| Q. | Some of the assets in my organization are old and have no market value. They have depreciated on paper to the point where they are considered worthless. Despite this, my company heavily relies on them. How can I place a value on these assets? | |
| A. | Asset valuation can also be determined by importance. By rating them on a scale of 1 to 10, with 10 being the most important, you are setting a value on them that does not rely on monetary figures. | |
| Q. | My company has recently installed a new T1 line that provides Internet access to employee workstations. I have heard about some companies having problems with their employees surfing the Web for pornography or playing online games on company machines. |