StudyToCert

All certifications / Security+ / Lessons

CompTIA Security+ SY0-701 · Domain 5: Program management & oversight

Risk: register, appetite, tolerance, SLE/ARO/ALE

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Risk is the possibility that a threat will exploit a vulnerability and cause harm to an asset. Risk management is how an organization identifies, measures and decides what to do about those possibilities, so it can spend its security budget where it matters most. Security+ tests the vocabulary of risk management, the tools used to track risk, and the quantitative formulas SLE, ARO and ALE. Expect at least one calculation question, so practice the math until it is automatic.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 8 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study Security+ for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the Security+ study plan