Study. uk . com
  1. Home
  2. All questions
  3. Question 340

CISM study material · question 340 of 1000

Assessing an advanced persistent threat, an organisation must choose a stance on likelihood. Which two stances does SP 800-30 present as the ends of that range? Choose two.

  1. Treating an event never yet seen as improbable
  2. Assuming the worst case — certain to happen sometime in the foreseeable future
  3. Assuming the likelihood is proportional to the organisation's annual revenue and headcount
  4. Assuming likelihood equal to the published industry average
Show the answer

Answer: B. Assuming the worst case — certain to happen sometime in the foreseeable future
A. Treating an event never yet seen as improbable

SP 800-30 sets out a spread of approaches for advanced persistent threats, bounded at one end by worst-case certainty and at the other by discounting anything not yet observed.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-3 Identify Assumptions and Constraints

Challenge yourself on this topic → Study as cards