(a)Briefly describe the five main components,or
steps ,of risk control.[5 marks ]
(b)Risk control may involve:
(i)transfer of risk
(ii)detection of occurrence
(iii)reduction of effects
Explain what is meant by each form of risk control,and discuss how
each control
might be implemented with respect to the risk of fire .[6 marks ]
(c)Two general controls that may be placed upon risk are:
separation and distribution of EDP functions
backup and recovery procedures
For each of these controls,give two examples of threats that the control
may help to counter,or the risks that they may be intended to reduce.[4
marks ]
|