Question 6
A risk manager is asked to perform a complete risk assessment for a company. What is the best method to identify most of the threats to the company?
- Have a brainstorm with representatives of all stakeholders
- Interview top management
- Send a checklist for threat identification to all staff involved in information security.