CIS 333 Week 2 Quiz 4 CIS 333 Week 2 Quiz 4 | Page 4

• Question 10 The first step in risk analysis is to determine what and where the organization’s _________ are located. • Question 11 How often should an organization perform a risk management plan? • Question 12 A ___________ is a formal analysis of an organization’s functions and activities that classifies them as critical or noncritical.