Study. uk . com
  1. Home
  2. All questions
  3. Question 241

CISM study material · question 241 of 1000

Under CSF 2.0, which combination of factors is used to understand inherent risk and rank which responses come first?

  1. Assets, owners, controls and costs
  2. Threats, vulnerabilities, likelihoods and impacts
  3. Confidentiality, integrity, availability and privacy of the data
  4. Appetite, tolerance, capacity and reserve
Show the answer

Answer: B. Threats, vulnerabilities, likelihoods and impacts

CSF 2.0's ID.RA-05 pairs four inputs — what threatens, what is weak, how likely, how damaging — to establish inherent risk and to decide which responses come first.

Source: NIST CSWP 29 (NIST) — Appendix A ID.RA-05

Challenge yourself on this topic → Study as cards