Study. uk . com
  1. Home
  2. All questions
  3. Question 262

CISM study material · question 262 of 1000

Which four elements does IR 8286 say a complete risk scenario describes?

  1. The asset at stake, the vulnerability found in it, the patch that closes it and the deadline for applying that patch
  2. The likelihood of the event occurring, the impact if it lands, the exposure that results from it and the priority which then follows
  3. The source of uncertainty, the predisposing conditions, the resources affected and the anticipated result
  4. The threat that acts, the control that treats it, the owner accountable for that control and the cost of running it
Show the answer

Answer: C. The source of uncertainty, the predisposing conditions, the resources affected and the anticipated result

IR 8286 wants four things in a scenario: where the uncertainty comes from, what conditions make it possible, what it would touch, and what is expected to result.

Source: NIST IR 8286 (NIST) — Sec. 3 Cybersecurity Risk Considerations

Challenge yourself on this topic → Study as cards