Study. uk . com
  1. Home
  2. All questions
  3. Question 357

CISM study material · question 357 of 1000

How does SP 800-30 characterise non-adversarial threat sources, in contrast to adversarial ones?

  1. By their historical frequency alone
  2. By the controls that would prevent them
  3. By the assets they typically affect
  4. By their potential range of effects, rather than by capability, intent and targeting
Show the answer

Answer: D. By their potential range of effects, rather than by capability, intent and targeting

SP 800-30 asks organisations to assess capabilities, intentions and targeting for adversarial threat sources, and to assess the potential range of effects for non-adversarial threat sources.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 2-1 Identify Threat Sources

Challenge yourself on this topic → Study as cards