Study. uk . com
  1. Home
  2. All questions
  3. Question 191

CISM study material · question 191 of 1000

An analyst has a long list of individual weaknesses, each rated low. Why does SP 800-30 recommend also analysing them together?

  1. Analysis of how several vulnerabilities could be chained by threat events is more useful than examining each in isolation
  2. Chained analysis reduces the total number of findings that have to be reported upward, which is what keeps the risk register manageable
  3. Aggregating several low findings automatically raises the severity of each one of them, since the combined exposure is what matters
  4. Individual analysis is prohibited once a scenario exists
Show the answer

Answer: A. Analysis of how several vulnerabilities could be chained by threat events is more useful than examining each in isolation

SP 800-30 states that some vulnerabilities are not exposed until others have been exploited, so analysis illuminating how a set of vulnerabilities together could be exploited by threat events is more useful than analysis of individual weaknesses.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.1 Risk Models — Vulnerabilities

Challenge yourself on this topic → Study as cards