Study. uk . com
  1. Home
  2. All questions
  3. Question 316

CISM study material · question 316 of 1000

Which two kinds of effect does IR 8286 include within mitigation? Choose two.

  1. Reducing the probability that a threat event materialises or succeeds
  2. Eliminating the activity that gives rise to the risk
  3. Limiting the amount of damage and liability once a loss occurs
  4. Shifting the financial consequence to an insurer
Show the answer

Answer: A. Reducing the probability that a threat event materialises or succeeds
C. Limiting the amount of damage and liability once a loss occurs

IR 8286 describes mitigation as applying actions that reduce threats, vulnerabilities and impacts to an acceptable level, including responses that help prevent a loss and responses that limit a loss by decreasing damage and liability.

Source: NIST IR 8286 (NIST) — Table 3 Response Types

Challenge yourself on this topic → Study as cards