Study. uk . com
  1. Home
  2. All questions
  3. Question 477

CISM study material · question 477 of 1000

A single cloud provider suffers a large-scale outage and several organisations in the same supply chain are disrupted at once. Which supply chain property does NIST use this to illustrate?

  1. Provider concentration is a contractual rather than a risk matter
  2. Cloud services are inherently unsuitable for critical processes
  3. Vulnerabilities in the supply chain are often interconnected and expose organisations to cascading risk
  4. Outages are non-adversarial and therefore outside supply chain risk
Show the answer

Answer: C. Vulnerabilities in the supply chain are often interconnected and expose organisations to cascading risk

SP 800-161r1 describes supply chain weaknesses as interlinked and capable of cascading, using a major cloud provider's large outage disrupting several entities at once as its illustration.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 2.2 Cybersecurity Risks Throughout Supply Chains

Challenge yourself on this topic → Study as cards