Study. uk . com
  1. Home
  2. All questions
  3. Question 287

CISM study material · question 287 of 1000

A risk workshop spends most of its time on an attack type recently covered heavily in the press, though it is rare in the organisation's sector. Which bias does IR 8286 describe?

  1. Following trends
  2. Group think
  3. Overconfidence
  4. Availability bias
Show the answer

Answer: D. Availability bias

IR 8286's availability bias is the pull toward whatever springs to mind — typically what has been read or heard recently — which need not reflect how likely the thing actually is.

Source: NIST IR 8286 (NIST) — Sec. 3.2.2 Determination of Potential Threats

Challenge yourself on this topic → Study as cards