Study. uk . com
  1. Home
  2. All questions
  3. Question 177

CISM study material · question 177 of 1000

A threat catalogue lists only deliberate attacks by outsiders. Which two further categories of threat source does SP 800-30 identify? Choose two.

  1. Budget reductions imposed part-way through the year
  2. Structural failures of resources the organisation controls
  3. Regulatory changes affecting the markets in which the organisation trades
  4. Human errors of omission or commission
Show the answer

Answer: B. Structural failures of resources the organisation controls
D. Human errors of omission or commission

SP 800-30 groups threat sources into hostile cyber or physical attacks, human errors of omission or commission, structural failures of organisation-controlled resources, and natural or man-made disasters.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models — Threats

Challenge yourself on this topic → Study as cards