An analysis begins with the consequences the organisation most fears and its critical assets, drawing on business impact analysis results, then works back to the threats that could cause them. Which orientation is this?

Question

Answer 1

Show the answer

Answer: B. Asset or impact oriented

SP 800-30 describes an asset or impact oriented approach as starting from the impacts or consequences of concern and critical assets, possibly using business impact analysis results, then identifying the threat events that could cause them.

Source: NIST SP 800-30 Rev. 1 (NIST) — Sec. 2.3.3 Analysis Approaches