During a municipal risk identification workshop, finance and IT list ransomware that encrypts property-tax databases as a top concern. What is the workshop primarily accomplishing?
Select an answer to reveal the explanation.
Short Explanation
Risk identification is the sticky-note stage—name the storms that could hit the town's assets before you price umbrellas. Listing ransomware against tax systems is putting the threat on the board, not yet buying insurance or running the ALE math.
Full Explanation
Risk identification surfaces threats, vulnerabilities, and asset exposures that matter to the organization. Naming ransomware against tax systems captures a scenario tied to municipal critical assets. Quantification, treatment decisions, and insurance purchasing come later in the risk management process and are not the primary output of identification workshops.