Study. uk . com
  1. Home
  2. All questions
  3. Question 301

CISM study material · question 301 of 1000

The same payroll server outage is assessed as far more damaging in one week than another. Which factor does IR 8286 use this to illustrate?

  1. Control effectiveness, which degrades over time
  2. Threat capability, which varies seasonally
  3. Asset value, which changes through the month
  4. Timing, since an outage shortly before payday is more damaging than one after paychecks are distributed
Show the answer

Answer: D. Timing, since an outage shortly before payday is more damaging than one after paychecks are distributed

IR 8286 gives exactly this example: if a financial server supports payroll, the impact of a loss shortly before payday may be significantly higher than after paychecks are distributed.

Source: NIST IR 8286 (NIST) — Sec. 3.3.2 Techniques for Estimating Likelihood and Impact

Challenge yourself on this topic → Study as cards