Study. uk . com
  1. Home
  2. All questions
  3. Question 129

CISM study material · question 129 of 1000

SP 800-39 describes impact being felt at three levels. Which set matches?

  1. A system failing to perform, a business process failing to meet objectives, and the organisation failing to comply or losing reputation
  2. Confidentiality, integrity and availability, the three security objectives against which the loss arising from any adverse event is finally measured
  3. Technical, administrative and physical
  4. Immediate, near-term and long-term
Show the answer

Answer: A. A system failing to perform, a business process failing to meet objectives, and the organisation failing to comply or losing reputation

SP 800-39 says organisations experience impact at the system level, failing to perform as required; at the process level, failing to meet objectives; and at the organisational level, failing to comply, damaging reputation or undermining viability.

Source: NIST SP 800-39 (NIST) — Task 1-1 Consequences and Impact

Challenge yourself on this topic → Study as cards