In management controls, RA stands for which?

• A. Risk assessment
• B. Risk analysis
• C. Regulatory approval
• D. Resource allocation

Answer: (A)

In management controls, RA denotes risk assessment. This is the broad process of identifying threats and vulnerabilities, estimating how likely they are and how severe their impact could be, and then prioritizing those risks to decide where to apply controls. This provides the foundation for allocating resources and choosing which security measures to implement first, based on the level of risk. Risk analysis is a related activity within this process, focusing on evaluating risk, but the standard interpretation of RA in this context is the full risk assessment. Regulatory approval and resource allocation are not the standard meanings of RA in management controls.