Study. uk . com
  1. Home
  2. All questions
  3. Question 112

CISM study material · question 112 of 1000

A risk assessment established a likelihood threshold for a particular threat. How can monitoring use that threshold, according to SP 800-39?

  1. The threshold is reported to the regulator when exceeded
  2. Monitoring watches for the threshold being met, and that triggers an incremental or full reassessment
  3. The threshold is used to set the control baseline for the affected systems, replacing the categorisation step entirely
  4. The threshold replaces the need for further monitoring of that threat, since the assessment has already fixed its likelihood
Show the answer

Answer: B. Monitoring watches for the threshold being met, and that triggers an incremental or full reassessment

SP 800-39 describes risk assessment threshold conditions being input to the monitoring step; if the conditions are met, that information feeds back into assessment as the basis for an incremental, differential or full reassessment.

Source: NIST SP 800-39 (NIST) — Sec. 3.4 Monitoring Risk

Challenge yourself on this topic → Study as cards