Study. uk . com
  1. Home
  2. All questions
  3. Question 282

CISM study material · question 282 of 1000

A risk identification exercise works only outward from technical scans of infrastructure. Which complementary direction does IR 8286 recommend?

  1. A backward pass over closed incidents
  2. An external pass performed only by consultants, whose independence is what makes the identification credible
  3. A top-down pass from critical or mission-essential functions to what could jeopardise them
  4. A sideways pass comparing peer organisations
Show the answer

Answer: C. A top-down pass from critical or mission-essential functions to what could jeopardise them

IR 8286 says practitioners often perform identification as both top-down and bottom-up: considering critical functions and what could jeopardise them, then assessing how threats affect assets, which together support comprehensive identification.

Source: NIST IR 8286 (NIST) — Sec. 3.2 Identify the Risks

Challenge yourself on this topic → Study as cards