Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 15 results · Page 16 for “risk”.

Mini-lessons

SecOT+ · Risk assessment and treatment

Treat risk with an accountable decision

Risk combines the possibility of an unwanted event with its consequences for an objective. Identify the asset, threat and conditions before choosing a response. Controls may reduce likelihoo…

Security+ · General Security Concepts

Control types: technical, managerial, operational, physical

…s and encryption. Managerial controls are policies and risk assessments that guide the programme. Operational controls are carried out by people day to day, such as awareness training and lo…

Security+ · General Security Concepts

Zero Trust splits into a control plane and a data plane

← PreviousPage 16

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

…ne, which weighs identity, device health, location and risk, and the Policy Administrator, which tells enforcement points what to do. The data plane is where subjects, systems and the Policy…

Security+ · Security Program Management and Oversight

ALE equals SLE times ARO

Quantitative risk analysis produces a yearly number to compare against the cost of controls. Single loss expectancy is asset value multiplied by exposure factor, the fraction of value lost i…

Security+ · Security Program Management and Oversight

Four risk responses: avoid, transfer, mitigate, accept

Once a risk is identified, an organisation chooses how to treat it. Avoidance removes the activity entirely, such as not launching a feature. Transference shifts the impact to another party …

SecurityX · Risk assessment and treatment

Treat risk with an accountable decision

Risk combines the possibility of an unwanted event with its consequences for an objective. Identify the asset, threat and conditions before choosing a response. Controls may reduce likelihoo…

THM-PT1 · Security findings and communication

A finding should explain a decision

… to verify it. Severity should follow the demonstrated risk, not the dramatic wording of the title. Worked example A security report lists a technical weakness without explaining consequence…

THM-SAL1 · Forensic analysis and timelines

Forensic analysis and timelines

…t and system changes. The incident plan and documented risk decision should determine the sequence. Recovered evidence can be useful with clear limitations. Distinguish observed bytes from r…

THM-SAL2 · Forensic analysis and timelines

Forensic analysis and timelines

…t and system changes. The incident plan and documented risk decision should determine the sequence. Recovered evidence can be useful with clear limitations. Distinguish observed bytes from r…

THM-WEB1 · Security findings and communication

A finding should explain a decision

… to verify it. Severity should follow the demonstrated risk, not the dramatic wording of the title. Worked example A security report lists a technical weakness without explaining consequence…

eCIR · Forensic analysis and timelines

Forensic analysis and timelines

…t and system changes. The incident plan and documented risk decision should determine the sequence. Recovered evidence can be useful with clear limitations. Distinguish observed bytes from r…

eCPPT · Security findings and communication

A finding should explain a decision

… to verify it. Severity should follow the demonstrated risk, not the dramatic wording of the title. Worked example A security report lists a technical weakness without explaining consequence…

eJPT · Security findings and communication

A finding should explain a decision

… to verify it. Severity should follow the demonstrated risk, not the dramatic wording of the title. Worked example A security report lists a technical weakness without explaining consequence…

eWPT · Security findings and communication

A finding should explain a decision

… to verify it. Severity should follow the demonstrated risk, not the dramatic wording of the title. Worked example A security report lists a technical weakness without explaining consequence…

eWPTX · Security findings and communication

A finding should explain a decision

… to verify it. Severity should follow the demonstrated risk, not the dramatic wording of the title. Worked example A security report lists a technical weakness without explaining consequence…