Study. uk . com
  1. Home
  2. All questions
  3. Question 239

CISM study material · question 239 of 1000

How does SP 800-39 characterise an advanced persistent threat, and what does it say about supply chain risk in that context?

  1. An attack technique used only against government organisations
  2. A category of non-adversarial threat with an extended duration
  3. A single high-severity intrusion, after which supplier risk is unchanged
  4. A long-term pattern of targeted, sophisticated attacks, in the face of which supplier risk becomes more pronounced
Show the answer

Answer: D. A long-term pattern of targeted, sophisticated attacks, in the face of which supplier risk becomes more pronounced

SP 800-39 describes advanced persistent threats as a long-term pattern of targeted, sophisticated attacks, and notes that for organisations facing them the risk posed by external partners, especially supply chain suppliers, may become more pronounced.

Source: NIST SP 800-39 (NIST) — Sec. 2.1 Components of Risk Management

Challenge yourself on this topic → Study as cards