Study. uk . com
  1. Home
  2. All questions
  3. Question 176

CISM study material · question 176 of 1000

Which set correctly lists the typical risk factors in the NIST risk model?

  1. Exposure, tolerance, appetite, capacity and residual risk, in that order of dependence
  2. Confidentiality, integrity, availability, accountability and assurance of the system
  3. Threat, vulnerability, impact, likelihood and predisposing condition
  4. Asset, threat, control, cost and owner
Show the answer

Answer: C. Threat, vulnerability, impact, likelihood and predisposing condition

SP 800-30 names threat, vulnerability, impact, likelihood and predisposing condition as typical risk factors, with threat decomposing further into threat sources and threat events.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models

Challenge yourself on this topic → Study as cards