1. Home
2. All questions
3. Question 296

CISM study material · question 296 of 1000

A threat event assessed as highly likely nevertheless produces only minor consequences when it occurs. Which explanation does IR 8286 offer?

• Risk management
• Incident management

1. Impact assessments are unreliable for likely events, because frequent events are judged from memory rather than from evidence
2. The likelihood assessment must have been wrong, since an event that truly was highly likely would have produced a larger loss
3. The event was not truly a threat event at all, because an event with only minor consequences does not meet the threshold set for the register
4. Elements of the security plan implemented for redundancy and resilience allow the organisation to keep operating

Challenge yourself on this topic → Study as cards