- Home
- All questions
- Question 284
CISM study material · question 284 of 1000
An analyst decides unilaterally which assets count as critical. What does IR 8286 say is needed for that determination?
Show the answer
Answer: D. Senior stakeholder guidance, because that judgement sets the impact side of every later risk analysis
IR 8286 states it is critical to gain senior stakeholders' guidance on which assets are critical or sensitive, since the relative importance of each asset is a necessary input to the impact portion of risk analysis.
Source: NIST IR 8286 (NIST) — Sec. 3.2.1 Inventory and Valuation of Assets