Study. uk . com
  1. Home
  2. All questions
  3. Question 303

CISM study material · question 303 of 1000

Which two secondary losses does IR 8286 give as examples following a telecommunications outage that takes a web server offline? Choose two.

  1. Penalties for failing to meet contractual service levels
  2. Customers lost through frustration with unavailable services
  3. Depreciation charged on the affected server hardware over its life
  4. An increase in the excess payable on the organisation's insurance policy
Show the answer

Answer: B. Customers lost through frustration with unavailable services
A. Penalties for failing to meet contractual service levels

IR 8286 counts more than the outage itself: customers who leave because the service was frustratingly unavailable, and penalties triggered by missed contractual service levels.

Source: NIST IR 8286 (NIST) — Sec. 3.3.2 Techniques for Estimating Likelihood and Impact

Challenge yourself on this topic → Study as cards