Study. uk . com
  1. Home
  2. All questions
  3. Question 284

CISM study material · question 284 of 1000

An analyst decides unilaterally which assets count as critical. What does IR 8286 say is needed for that determination?

  1. An automated scan of asset utilisation
  2. The insurance schedule for the estate
  3. An external appraisal of each asset
  4. Senior stakeholder guidance, because that judgement sets the impact side of every later risk analysis
Show the answer

Answer: D. Senior stakeholder guidance, because that judgement sets the impact side of every later risk analysis

IR 8286 states it is critical to gain senior stakeholders' guidance on which assets are critical or sensitive, since the relative importance of each asset is a necessary input to the impact portion of risk analysis.

Source: NIST IR 8286 (NIST) — Sec. 3.2.1 Inventory and Valuation of Assets

Challenge yourself on this topic → Study as cards