Study. uk . com
  1. Home
  2. All questions
  3. Question 359

CISM study material · question 359 of 1000

Which kind of threat event does SP 800-30 say is of particular interest at the business process tier?

  1. Events for which no vulnerability has yet been identified anywhere in the whole estate at all
  2. Events that cross or span system boundaries or exploit dependencies among systems
  3. Events affecting the organisation as a whole
  4. Events describable in terms of one specific technology or one particular operating environment
Show the answer

Answer: B. Events that cross or span system boundaries or exploit dependencies among systems

SP 800-30 states that at Tier 2, threat events that cross or span system boundaries, exploit functional dependencies or connectivity among systems, or affect business owners are of particular interest.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 2-2 Identify Threat Events

Challenge yourself on this topic → Study as cards