EXAM QUICK REFERENCE

Information Security Management (SG) exam quick reference

Turn security vocabulary back into a decision chain: what is protected, what may happen, where the weakness lies, and who should act. Section B applies that chain to longer cases.

Follows IPA Syllabus v4.1 and the current 120-minute, 60-question Sections A/B format.

Chapters: 12
Reference items: 72
Questions: 180
In-practice help: Ask Miko anytime

Question practice is open. These resources are available without signing in.

QUICK REFERENCE

Look up a term, grammar form, or method

Showing 6 items

Risk assessment and treatment

001リスクriskEssential

Core note: The effect of uncertainty on objectives, often assessed in security through likelihood and impact.
Exam area: Risk assessment and treatment
Decision focus: Risk remaining after controls is residual risk.

002リスク対応risk treatmentEssential

Core note: Handling risk through options such as avoidance, reduction, transfer, or acceptance.
Exam area: Risk assessment and treatment
Decision focus: Risk remaining after controls is residual risk.

003リスク特定risk identificationEssential

Core note: Identifies assets, threats, vulnerabilities, existing controls, and possible consequences.
Exam area: Risk assessment and treatment
Decision focus: Risk remaining after controls is residual risk.

004発生可能性・影響度likelihood and impactEssential

Core note: Combines likelihood and business impact to assess risk level.
Exam area: Risk assessment and treatment
Decision focus: Risk remaining after controls is residual risk.

005リスク基準risk criteriaFrequent

Core note: Organizational criteria for comparing, prioritizing, and accepting risks.
Exam area: Risk assessment and treatment
Decision focus: Risk remaining after controls is residual risk.

006残留リスクresidual riskEssential

Core note: Risk remaining after controls that must still be monitored or accepted.
Exam area: Risk assessment and treatment
Decision focus: Risk remaining after controls is residual risk.