Free CompTIA Security+ SY0-601 Practice Question

A risk matrix, also known as a heat map, provides a visual representation of risks by plotting them according to their likelihood of occurrence and their potential impact on the organization. This allows for easier prioritization of risks and better communication with stakeholders. A risk register is used to record details of all identified risks, including their potential impact and mitigation measures, but does not offer the same visual assessment as the risk matrix. A risk appetite statement defines the level and type of risk that an organization is willing to accept, and a risk assessment questionnaire is a tool used for gathering information to identify risks, neither providing a visualization of prioritization.