Question

containing the effects of a security incident and identifying how a company can continue their most critical activities are examples of which two steps of the pprr risk management model?

preparedness and recovery
response and recovery
prevention and recovery
preparedness and response

Explanation:

Define the PPRR model

The PPRR model stands for Prevention, Preparedness, Response, and Recovery. It is a standard framework used in risk management and Cybersecurity Threats mitigation.

Analyze the first action

"Containing the effects of a security incident" refers to immediate actions taken during or directly after an attack to limit damage. This matches the Response phase.

Analyze the second action

"Identifying how a company can continue their most critical activities" focuses on business continuity and returning to normal operations. This matches the Recovery phase.

Match with options

Combining these two phases yields "response and recovery", which corresponds to the second option.

Answer:

• preparedness and recovery
• response and recovery (Correct answer)
• prevention and recovery
• preparedness and response