Study. uk . com
  1. Home
  2. All questions
  3. Question 367

CISM study material · question 367 of 1000

A threat event is identified for which no vulnerability or predisposing condition can be found. What does SP 800-30 direct?

  1. It has a very low likelihood of adverse impact and is tracked for future assessments rather than analysed further now
  2. It must be assigned a default moderate likelihood, so that an absence of evidence does not quietly become the evidence of absence
  3. It is removed permanently from the threat catalogue, since an event with nothing at all to exploit cannot produce an adverse impact
  4. It must be escalated to the risk executive function for a decision, since no individual assessor may close such a threat event on their own account
Show the answer

Answer: A. It has a very low likelihood of adverse impact and is tracked for future assessments rather than analysed further now

SP 800-30 states threat events with no identified vulnerabilities or predisposing conditions have a very low likelihood of resulting in adverse impacts, and can be highlighted and tracked for consideration in follow-on assessments without further analysis now.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 2-4 Determine Likelihood

Challenge yourself on this topic → Study as cards