Study. uk . com
  1. Home
  2. All questions
  3. Question 290

CISM study material · question 290 of 1000

A register holds separate entries for a website outage and a help desk outage. What does IR 8286 say may also be needed?

  1. Removal of the lower-priority entry to avoid duplication, since one outage entry can stand for both of the services
  2. A merged entry replacing the two separate ones, so that the register carries a single availability risk
  3. An escalation of both entries to high priority
  4. A third entry considering the likelihood and impact of both services being lost at once
Show the answer

Answer: D. A third entry considering the likelihood and impact of both services being lost at once

IR 8286 states combinations of multiple risks should be considered, giving exactly this example: separate website and help desk outage risks may require a third entry for an outage affecting both services simultaneously.

Source: NIST IR 8286 (NIST) — Sec. 3.2.2 Determination of Potential Threats

Challenge yourself on this topic → Study as cards