In the seven-step IDRMP process, which step follows the Risk Tolerance Decision?

In the seven-step IDRMP process, which step follows the Risk Tolerance Decision?

• A. COA
• B. Risk Assessment
• C. Threat Assessment
• D. Decision and Implementation

Answer: (A)

After the risk tolerance decision is made, the next step is to develop Courses of Action. This is the stage where you create and compare practical options to reduce or manage risk so that it aligns with the established tolerance. Threat assessment and risk assessment typically come earlier to inform what risks exist and how severe they are, while decision and implementation happen after COAs are evaluated and a plan is chosen. So, crafting COAs is the step that follows setting the risk tolerance.

After the risk tolerance decision is made, the next step is to develop Courses of Action. This is the stage where you create and compare practical options to reduce or manage risk so that it aligns with the established tolerance. Threat assessment and risk assessment typically come earlier to inform what risks exist and how severe they are, while decision and implementation happen after COAs are evaluated and a plan is chosen. So, crafting COAs is the step that follows setting the risk tolerance.