What are the Risk Assessment Steps? (Risk framing)

• A. Prepare for assessment; Conduct the assessment; Report and Communicate the assessment; Maintain the assessment
• B. Identify purpose; Identify scope; Identify assumptions; Identify stakeholders
• C. Define system boundaries; Inventory assets; Establish backup; Disaster recovery
• D. Develop risk rating; Create mitigation plan; Approve plan; Monitor

Answer: (A)

The main concept here is the lifecycle of risk assessment and how risk framing sets up, executes, and sustains the process. The best answer follows that full sequence: prepare for the assessment to define objectives, scope, data sources, roles, and schedule; conduct the assessment using that plan to identify threats, vulnerabilities, and potential impacts; report and communicate the findings so decision-makers understand the risk posture and recommended actions; and maintain the assessment over time to keep it current as the environment and controls change. The other options miss part of this cycle—one emphasizes only planning elements, another centers on recovery planning rather than risk framing and assessment, and another focuses on risk treatment steps rather than how to frame and carry out the assessment itself.