Study. uk . com
  1. Home
  2. All questions
  3. Question 264

CISM study material · question 264 of 1000

According to IR 8286, security controls respond to cybersecurity risk in four ways. Which set is correct?

  1. Avoiding, accepting, sharing or transferring the risk once it has been identified and rated
  2. Assessing, authorising, monitoring and reporting
  3. Identifying, protecting, responding and recovering across the whole estate at any one time
  4. Deterring, detecting, preventing or correcting threats and vulnerabilities
Show the answer

Answer: D. Deterring, detecting, preventing or correcting threats and vulnerabilities

IR 8286 groups control action into four verbs against threats and vulnerabilities — deter, detect, prevent, correct — delivered by management, administrative and technical means.

Source: NIST IR 8286 (NIST) — Sec. 3 Cybersecurity Risk Considerations

Challenge yourself on this topic → Study as cards