Question 1 of 18
How should an authorizing official evaluate and communicate acceptance of residual risk when a system is authorized?
Strong Interview Answer
The authorizing official formally accepts the residual risk, signifying a tolerance for remaining vulnerabilities.
What to Listen For
- acceptance
- residual risk
- tolerance
- risk management principles
Caution
Focus on the acceptance of risk, not simply the definition of risk.