RA Step 1 Task 3 focuses on which area?

• A. Identifying assumptions and considerations
• B. Identifying purpose of assessment
• C. Identifying scope
• D. Conducting the assessment

Answer: (A)

Setting the context for the risk assessment begins with capturing the assumptions about the system and environment, along with the considerations that will shape the analysis. This step gives you the boundaries and data you can rely on, such as expected threat landscapes, data sensitivity, available logs, regulatory requirements, and organizational priorities. By identifying these upfront, you ensure the assessment is grounded in reality, aligns stakeholder expectations, and makes clear what is in scope or out of scope and what factors might sway results. The purpose of the assessment, the explicit scope, and the actual conduct of the assessment are important activities too, but they occur in other tasks or stages; the task focused on assumptions and considerations sets the foundational context for everything that follows.