Study. uk . com
  1. Home
  2. All questions
  3. Question 362

CISM study material · question 362 of 1000

Which organisation-tier vulnerability does SP 800-30 illustrate with the example of subverted components entering the estate?

  1. Failure to define the authorisation boundary
  2. Failure to consider supply chain activities
  3. Failure to maintain the asset inventory
  4. Failure to categorise systems correctly
Show the answer

Answer: B. Failure to consider supply chain activities

SP 800-30 gives the example that organisational failure to consider supply chain activities can result in acquiring subverted components that adversaries could exploit to disrupt missions or obtain sensitive information.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 2-3 Identify Vulnerabilities

Challenge yourself on this topic → Study as cards